re-enable CURLOPT_FOLLOWLOCATION with open_basedir or safe_mode
| Request #65646 | re-enable CURLOPT_FOLLOWLOCATION with open_basedir or safe_mode | ||||
|---|---|---|---|---|---|
| Submitted: | 2013-09-09 21:27 UTC | Modified: | 2013-09-10 18:45 UTC | ||
| From: | butesa at freenet dot de | Assigned: | aharvey (profile) | ||
| Status: | Closed | Package: | cURL related | ||
| PHP Version: | 5.5.3 | OS: | any | ||
| Private report: | No | CVE-ID: | None | ||
[2013-09-09 21:27 UTC] butesa at freenet dot de
Description:
------------
CURLOPT_FOLLOWLOCATION is disabled when open_basedir is set or when safe_mode is on.
Since 7.19.4, curl won't follow a location-header that uses the file-protocol. So using CURLOPT_FOLLOWLOCATION in combination with open_basedir or safe_mode should be fine.
("Since 7.19.4, libcurl can limit what protocols it will automatically follow. The accepted protocols are set with CURLOPT_REDIR_PROTOCOLS and it excludes the FILE protocol by default." http://curl.haxx.se/libcurl/c/curl_easy_setopt.html#CURLOPTFOLLOWLOCATION )
Patches
Pull Requests
History
AllCommentsChangesGit/SVN commits
[2013-09-10 06:26 UTC] aharvey@php.net
-Status: Open +Status: Assigned -Assigned To: +Assigned To: aharvey
[2013-09-10 06:26 UTC] aharvey@php.net
[2013-09-10 07:08 UTC] sudanisayfree at gmail dot com