diff options
| -rw-r--r-- | ex_imp.c | 2 | ||||
| -rw-r--r-- | ifilter.c | 2 | ||||
| -rw-r--r-- | ufilter.c | 2 |
3 files changed, 3 insertions, 3 deletions
| @@ -74,7 +74,7 @@ static int php_valid_var_name(char *var_name, int len) /* {{{ */ | |||
| 74 | } | 74 | } |
| 75 | } | 75 | } |
| 76 | 76 | ||
| 77 | if (php_varname_check(var_name, len, 0 TSRMLS_CC) == FAILURE) { | 77 | if (php_varname_check(var_name, len, 1 TSRMLS_CC) == FAILURE) { |
| 78 | return 0; | 78 | return 0; |
| 79 | } | 79 | } |
| 80 | 80 | ||
| @@ -620,7 +620,7 @@ unsigned int suhosin_input_filter(int arg, char *var, char **val, unsigned int v | |||
| 620 | 620 | ||
| 621 | /* Drop this variable if it is one of GLOBALS, _GET, _POST, ... */ | 621 | /* Drop this variable if it is one of GLOBALS, _GET, _POST, ... */ |
| 622 | /* This is to protect several silly scripts that do globalizing themself */ | 622 | /* This is to protect several silly scripts that do globalizing themself */ |
| 623 | if (php_varname_check(var, var_len, 0 TSRMLS_CC) == FAILURE) { | 623 | if (php_varname_check(var, var_len, 1 TSRMLS_CC) == FAILURE) { |
| 624 | suhosin_log(S_VARS, "tried to register forbidden variable '%s' through %s variables", var, arg == PARSE_GET ? "GET" : arg == PARSE_POST ? "POST" : "COOKIE"); | 624 | suhosin_log(S_VARS, "tried to register forbidden variable '%s' through %s variables", var, arg == PARSE_GET ? "GET" : arg == PARSE_POST ? "POST" : "COOKIE"); |
| 625 | if (!SUHOSIN_G(simulation)) { | 625 | if (!SUHOSIN_G(simulation)) { |
| 626 | return 0; | 626 | return 0; |
| @@ -133,7 +133,7 @@ static int check_fileupload_varname(char *varname) | |||
| 133 | 133 | ||
| 134 | /* Drop this variable if it is one of GLOBALS, _GET, _POST, ... */ | 134 | /* Drop this variable if it is one of GLOBALS, _GET, _POST, ... */ |
| 135 | /* This is to protect several silly scripts that do globalizing themself */ | 135 | /* This is to protect several silly scripts that do globalizing themself */ |
| 136 | if (php_varname_check(var, var_len, 0 TSRMLS_CC) == FAILURE) { | 136 | if (php_varname_check(var, var_len, 1 TSRMLS_CC) == FAILURE) { |
| 137 | suhosin_log(S_FILES, "tried to register forbidden variable '%s' through FILE variables", var); | 137 | suhosin_log(S_FILES, "tried to register forbidden variable '%s' through FILE variables", var); |
| 138 | if (!SUHOSIN_G(simulation)) { | 138 | if (!SUHOSIN_G(simulation)) { |
| 139 | goto return_failure; | 139 | goto return_failure; |
