Fix for #11570

php · Jun 20, 2001 · 94897ef · 94897ef
1 parent d0fba81
commit 94897ef
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/ext/standard/dir.c b/ext/standard/dir.c
@@ -281,6 +281,9 @@ PHP_FUNCTION(chdir)
 	}
 	convert_to_string_ex(arg);
 
+	if (PG(safe_mode) && !php_checkuid((*arg)->value.str.val, NULL, CHECKUID_ALLOW_ONLY_DIR)) {
+		RETURN_FALSE;
+	}
 	ret = VCWD_CHDIR((*arg)->value.str.val);
 
 	if (ret != 0) {