mirrors/php-src
0
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2024-11-28 20:34:29 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fixed MOPB-26-2007 mb_parse_str() can be used to activate register_globals

Browse Source 
# Discovered by Stefan Esser
This commit is contained in:
Ilia Alshanetsky 2007-03-18 16:36:13 +00:00
parent 8e67ec8225
commit 89939e13d6
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
ext/mbstring/mb_gpc.c
View File

@ -208,9 +208,8 @@ enum mbfl_no_encoding _php_mb_encoding_handler_ex(const php_mb_encoding_handler_
/* register_globals stuff
* XXX: this feature is going to be deprecated? */
if (info->force_register_globals) {
prev_rg_state = PG(register_globals);
PG(register_globals) = 1;
if (info->force_register_globals && !(prev_rg_state = PG(register_globals))) {
zend_alter_ini_entry("register_globals", sizeof("register_globals"), "1", sizeof("1")-1, PHP_INI_PERDIR, PHP_INI_STAGE_RUNTIME);
}
if (!res || *res == '\0') {
@ -343,8 +342,8 @@ enum mbfl_no_encoding _php_mb_encoding_handler_ex(const php_mb_encoding_handler_
out:
/* register_global stuff */
if (info->force_register_globals) {
PG(register_globals) = prev_rg_state;
if (info->force_register_globals && !prev_rg_state) {
zend_alter_ini_entry("register_globals", sizeof("register_globals"), "0", sizeof("0")-1, PHP_INI_PERDIR, PHP_INI_STAGE_RUNTIME);
}
if (convd != NULL) {