mirror of
https://github.com/php/php-src.git
synced 2024-11-25 10:54:15 +08:00
771e3e498f
- [ main/safe_mode.h ] added new checkuid mode:
CHECKUID_ALLOW_ONLY_FILE: skips directory check if file check
fails
- [ ext/standard/dir.c ] changed php_checkuid() to use
CHECKUID_ALLOW_ONLY_FILE instead of CHECKUID_ALLOW_ONLY_DIR
- [ main/safe_mode.c ] added code for new checkuid mode
o Fixed Bug #12119: safe mode owner check can be bypassed with symlink
- [ main/safe_mode.c ] use VCWD_REALPATH to resolve destination
of symlink before trimming filename
o New Feature: safe_mode_include_dir (php.ini directive)
- Allows bypassing UID/GID checks when including files
from the directory in safe_mode_include_dir and its
subdirectories. (safe_mode must be on, directory must
also be in include_path or full path must be used when
including)
o Fixed Feature: safe_mode_gid (php.ini directive)
- Correctly check (and report) UID/GID bits on directories
o Changed include() fall back to scripts cwd implementation
- CWD added to the (local) search path in php_fopen_with_path()
instead of seperate case. [ main/fopen_wrappers.c ]
150 lines
3.5 KiB
C
150 lines
3.5 KiB
C
/*
|
|
+----------------------------------------------------------------------+
|
|
| PHP version 4.0 |
|
|
+----------------------------------------------------------------------+
|
|
| Copyright (c) 1997-2001 The PHP Group |
|
|
+----------------------------------------------------------------------+
|
|
| This source file is subject to version 2.02 of the PHP license, |
|
|
| that is bundled with this package in the file LICENSE, and is |
|
|
| available at through the world-wide-web at |
|
|
| http://www.php.net/license/2_02.txt. |
|
|
| If you did not receive a copy of the PHP license and are unable to |
|
|
| obtain it through the world-wide-web, please send a note to |
|
|
| license@php.net so we can mail you a copy immediately. |
|
|
+----------------------------------------------------------------------+
|
|
| Authors: Zeev Suraski <zeev@zend.com> |
|
|
+----------------------------------------------------------------------+
|
|
*/
|
|
|
|
|
|
#ifndef PHP_GLOBALS_H
|
|
#define PHP_GLOBALS_H
|
|
|
|
#include "zend_globals.h"
|
|
|
|
typedef struct _php_core_globals php_core_globals;
|
|
|
|
#ifdef ZTS
|
|
# define PLS_D php_core_globals *core_globals
|
|
# define PLS_DC , PLS_D
|
|
# define PLS_C core_globals
|
|
# define PLS_CC , PLS_C
|
|
# define PG(v) (core_globals->v)
|
|
# define PLS_FETCH() php_core_globals *core_globals = ts_resource(core_globals_id)
|
|
extern PHPAPI int core_globals_id;
|
|
#else
|
|
# define PLS_D
|
|
# define PLS_DC
|
|
# define PLS_C
|
|
# define PLS_CC
|
|
# define PG(v) (core_globals.v)
|
|
# define PLS_FETCH()
|
|
extern ZEND_API struct _php_core_globals core_globals;
|
|
#endif
|
|
|
|
|
|
#define TRACK_VARS_POST 0
|
|
#define TRACK_VARS_GET 1
|
|
#define TRACK_VARS_COOKIE 2
|
|
#define TRACK_VARS_SERVER 3
|
|
#define TRACK_VARS_ENV 4
|
|
#define TRACK_VARS_FILES 5
|
|
|
|
struct _php_tick_function_entry;
|
|
|
|
typedef struct _arg_separators {
|
|
char *output;
|
|
char *input;
|
|
} arg_separators;
|
|
|
|
struct _php_core_globals {
|
|
zend_bool magic_quotes_gpc;
|
|
zend_bool magic_quotes_runtime;
|
|
zend_bool magic_quotes_sybase;
|
|
|
|
zend_bool allow_call_time_pass_reference;
|
|
zend_bool zend_set_utility_values;
|
|
zend_bool output_buffering;
|
|
zend_bool implicit_flush;
|
|
|
|
zend_bool safe_mode;
|
|
char *safe_mode_include_dir;
|
|
zend_bool safe_mode_gid;
|
|
zend_bool sql_safe_mode;
|
|
zend_bool enable_dl;
|
|
|
|
char *output_handler;
|
|
|
|
char *safe_mode_exec_dir;
|
|
|
|
long memory_limit;
|
|
|
|
zend_bool track_errors;
|
|
zend_bool display_errors;
|
|
zend_bool display_startup_errors;
|
|
zend_bool log_errors;
|
|
char *error_log;
|
|
|
|
char *doc_root;
|
|
char *user_dir;
|
|
char *include_path;
|
|
char *open_basedir;
|
|
char *extension_dir;
|
|
|
|
char *upload_tmp_dir;
|
|
long upload_max_filesize;
|
|
|
|
char *error_append_string;
|
|
char *error_prepend_string;
|
|
|
|
char *auto_prepend_file;
|
|
char *auto_append_file;
|
|
|
|
arg_separators arg_separator;
|
|
|
|
char *gpc_order;
|
|
char *variables_order;
|
|
|
|
HashTable rfc1867_protected_variables;
|
|
|
|
short connection_status;
|
|
short ignore_user_abort;
|
|
|
|
unsigned char header_is_being_sent;
|
|
|
|
zend_llist tick_functions;
|
|
|
|
zval *http_globals[6];
|
|
|
|
zend_bool expose_php;
|
|
|
|
zend_bool register_globals;
|
|
zend_bool register_argc_argv;
|
|
|
|
zend_bool y2k_compliance;
|
|
|
|
zend_bool html_errors;
|
|
zend_bool xmlrpc_errors;
|
|
|
|
long xmlrpc_error_number;
|
|
|
|
|
|
zend_bool modules_activated;
|
|
|
|
zend_bool file_uploads;
|
|
|
|
zend_bool during_request_startup;
|
|
|
|
zend_bool allow_url_fopen;
|
|
};
|
|
|
|
|
|
#endif /* PHP_GLOBALS_H */
|
|
|
|
/*
|
|
* Local variables:
|
|
* tab-width: 4
|
|
* c-basic-offset: 4
|
|
* End:
|
|
*/
|