fix potentially major security hole: modification/creation of files in .phar directory enabled in many locations which then allows easy creation of tar/zip-based phar archives with a simple renam
fix potentially major security hole: modification/creation of files in .phar directory enabled in many locations which then allows easy creation of tar/zip-based phar archives with a simple rename even when phar.readonly=1. Plug the hole very tightly, allowing read access to files, and also excluding them from opendir() output
show more ...
|