Changeset 1615

Timestamp:

2008-02-25 11:20:21 (2 years ago)

Author:

wwalc

Message:

Fix for #1906: detecthtml failed when open_basedir was set

Location:

FCKeditor/trunk/editor/filemanager/connectors/php

Files:

• commands.php (modified) (3 diffs)
• util.php (modified) (2 diffs)

FCKeditor/trunk/editor/filemanager/connectors/php/commands.php

@@ -185 +185 @@
                 if ( isset( $Config['SecureImageUploads'] ) )
                 {
-                        if ( !IsImageValid( $oFile['tmp_name'], $sExtension ) )
+                        if ( ( $isImageValid = IsImageValid( $oFile['tmp_name'], $sExtension ) ) === false )
                         {
                                 $sErrorNumber = '202' ;
@@ -193 +193 @@
                 if ( isset( $Config['HtmlExtensions'] ) )
                 {
-                        if ( !IsHtmlExtension( $sExtension, $Config['HtmlExtensions'] ) && DetectHtml( $oFile['tmp_name'] ) )
+                        if ( !IsHtmlExtension( $sExtension, $Config['HtmlExtensions'] ) && 
+                                ( $detectHtml = DetectHtml( $oFile['tmp_name'] ) ) === true )
                         {
                                 $sErrorNumber = '202' ;
@@ -228 +229 @@
                                 }
                         }
+                        
+                        if ( file_exists( $sFilePath ) )
+                        {
+                                //previous checks failed, try once again
+                                if ( isset( $isImageValid ) && $isImageValid === -1 && IsImageValid( $sFilePath, $sExtension ) === false )
+                                {
+                                        @unlink( $sFilePath ) ;
+                                        $sErrorNumber = '202' ;
+                                }
+                                else if ( isset( $detectHtml ) && $detectHtml === -1 && DetectHtml( $sFilePath ) === true )
+                                {
+                                        @unlink( $sFilePath ) ;
+                                        $sErrorNumber = '202' ;                                 
+                                }
+                        }
                 }
                 else

FCKeditor/trunk/editor/filemanager/connectors/php/util.php

@@ -87 +87 @@
 function DetectHtml( $filePath )
 {
-        $fp = fopen( $filePath, 'rb' ) ;
+        $fp = @fopen( $filePath, 'rb' ) ;
+        
+        //open_basedir restriction, see #1906
+        if ( $fp === false || !flock( $fp, LOCK_SH ) )
+        {
+                return -1 ;
+        }
+                
         $chunk = fread( $fp, 1024 ) ;
+        flock( $fp, LOCK_UN ) ;
         fclose( $fp ) ;
 
@@ -150 +158 @@
 function IsImageValid( $filePath, $extension )
 {
+        if (!@is_readable($filePath)) {
+                return -1;
+        }
+        
         $imageCheckExtensions = array('gif', 'jpeg', 'jpg', 'png', 'swf', 'psd', 'bmp', 'iff');