Gecko [ www.foryou-vip.com ]

Name	Size	Permission	Date
53965	[ DIR ]	drwxrwxr-x	2022-10-31 11:36
area_list.xsl	329 B	-rw-rw-r--	2022-10-31 11:36
area_name.xml	216 B	-rw-rw-r--	2022-10-31 11:36
bug26384.phpt	677 B	-rw-rw-r--	2022-10-31 11:36
bug33853.phpt	954 B	-rw-rw-r--	2022-10-31 11:36
bug48221.phpt	522 B	-rw-rw-r--	2022-10-31 11:36
bug49634.phpt	2.82 KB	-rw-rw-r--	2022-10-31 11:36
bug49634.xml	8 B	-rw-rw-r--	2022-10-31 11:36
bug53965.phpt	740 B	-rw-rw-r--	2022-10-31 11:36
bug54446.phpt	2.46 KB	-rw-rw-r--	2022-10-31 11:36
bug54446_with_ini.phpt	2.52 KB	-rw-rw-r--	2022-10-31 11:36
bug70078.phpt	3.22 KB	-rw-rw-r--	2022-10-31 11:36
bug70535.phpt	660 B	-rw-rw-r--	2022-10-31 11:36
bug71540.phpt	2.07 KB	-rw-rw-r--	2022-10-31 11:36
documentxpath.xsl	367 B	-rw-rw-r--	2022-10-31 11:36
exslt.xml	348 B	-rw-rw-r--	2022-10-31 11:36
exslt.xsl	2.33 KB	-rw-rw-r--	2022-10-31 11:36
phpfunc-nostring.xsl	363 B	-rw-rw-r--	2022-10-31 11:36
phpfunc-undef.xsl	375 B	-rw-rw-r--	2022-10-31 11:36
phpfunc.xsl	419 B	-rw-rw-r--	2022-10-31 11:36
prepare.inc	380 B	-rw-rw-r--	2022-10-31 11:36
skipif.inc	79 B	-rw-rw-r--	2022-10-31 11:36
streamsinclude.xsl	263 B	-rw-rw-r--	2022-10-31 11:36
xsl-phpinfo.phpt	307 B	-rw-rw-r--	2022-10-31 11:36
xslt.xml	833 B	-rw-rw-r--	2022-10-31 11:36
xslt.xsl	721 B	-rw-rw-r--	2022-10-31 11:36
xslt.xsl.gz	395 B	-rw-rw-r--	2022-10-31 11:36
xslt001.phpt	430 B	-rw-rw-r--	2022-10-31 11:36
xslt002.phpt	629 B	-rw-rw-r--	2022-10-31 11:36
xslt003.phpt	464 B	-rw-rw-r--	2022-10-31 11:36
xslt004.phpt	631 B	-rw-rw-r--	2022-10-31 11:36
xslt005.phpt	618 B	-rw-rw-r--	2022-10-31 11:36
xslt006.phpt	433 B	-rw-rw-r--	2022-10-31 11:36
xslt007.phpt	513 B	-rw-rw-r--	2022-10-31 11:36
xslt008-mb.phpt	681 B	-rw-rw-r--	2022-10-31 11:36
xslt008.phpt	645 B	-rw-rw-r--	2022-10-31 11:36
xslt009.phpt	580 B	-rw-rw-r--	2022-10-31 11:36
xslt010.phpt	5.71 KB	-rw-rw-r--	2022-10-31 11:36
xslt010_gt10129.phpt	5.64 KB	-rw-rw-r--	2022-10-31 11:36
xslt011.phpt	1.38 KB	-rw-rw-r--	2022-10-31 11:36
xslt011.xml	62 B	-rw-rw-r--	2022-10-31 11:36
xslt011.xsl	731 B	-rw-rw-r--	2022-10-31 11:36
xslt012.phpt	935 B	-rw-rw-r--	2022-10-31 11:36
xslt012.xsl	827 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_getParameter-invalidparam.phpt	368 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_getParameter.phpt	426 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_hasExsltSupport.phpt	332 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_hasExsltSupport_wrongparam_001.phpt	339 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_registerPHPFunctions-allfuncs.phpt	689 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_registerPHPFunctions-array-multiple.phpt	984 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_registerPHPFunctions-array-notallowed.phpt	716 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_registerPHPFunctions-array.phpt	624 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_registerPHPFunctions-funcnostring.phpt	810 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_registerPHPFunctions-funcundef.phpt	785 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_registerPHPFunctions-null.phpt	876 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_registerPHPFunctions-string-multiple.phpt	894 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_registerPHPFunctions-string-notallowed.phpt	716 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_registerPHPFunctions-string.phpt	618 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_removeParameter-invalidparam.phpt	403 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_removeParameter.phpt	458 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_setparameter-errorquote.phpt	626 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_setparameter-nostring.phpt	578 B	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_transformToDoc.phpt	1.17 KB	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_transformToURI.phpt	1.16 KB	-rw-rw-r--	2022-10-31 11:36
xsltprocessor_transformToXML.phpt	1.31 KB	-rw-rw-r--	2022-10-31 11:36
私はガラスを食べられますstreamsinclude.xsl	263 B	-rw-rw-r--	2022-10-31 11:36

Rename

--TEST--
Bug #54446 (Arbitrary file creation via libxslt 'output' extension with php.ini setting)
--SKIPIF--
<?php
if (!extension_loaded('xsl')) die("skip Extension XSL is required\n");
?>
--FILE--
<?php
include("prepare.inc");

$outputfile = __DIR__."/bug54446test_with_ini.txt";
if (file_exists($outputfile)) {
    unlink($outputfile);
}

$sXsl = <<<EOT
<xsl:stylesheet version="1.0"
	xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
	xmlns:sax="http://icl.com/saxon"
	extension-element-prefixes="sax">

<xsl:template match="/">
		<sax:output href="$outputfile" method="text">
			<xsl:value-of select="'0wn3d via PHP and libxslt ...'"/>
		</sax:output>
	</xsl:template>

</xsl:stylesheet>
EOT;

$xsl->loadXML( $sXsl );

# START XSLT
$proc->importStylesheet( $xsl );

# TRASNFORM & PRINT
print $proc->transformToXML( $dom );

if (file_exists($outputfile)) {
    print "$outputfile exists, but shouldn't!\n";
} else {
    print "OK, no file created\n";
}

#SET NO SECURITY PREFS
$proc->setSecurityPrefs(XSL_SECPREF_NONE);

# TRANSFORM & PRINT
print $proc->transformToXML( $dom );

if (file_exists($outputfile)) {
    print "OK, file exists\n";
} else {
    print "$outputfile doesn't exist, but should!\n";
}

unlink($outputfile);

#SET SECURITY PREFS AGAIN
$proc->setSecurityPrefs(XSL_SECPREF_WRITE_FILE | XSL_SECPREF_WRITE_NETWORK | XSL_SECPREF_CREATE_DIRECTORY);

# TRANSFORM & PRINT
print $proc->transformToXML( $dom );

if (file_exists($outputfile)) {
    print "$outputfile exists, but shouldn't!\n";
} else {
    print "OK, no file created\n";
}

?>
--EXPECTF--
Warning: XSLTProcessor::transformToXml(): runtime error: file %s line %s element output in %s on line %d

Warning: XSLTProcessor::transformToXml(): File write for %s/bug54446test_with_ini.txt refused in %s on line %d

Warning: XSLTProcessor::transformToXml(): runtime error: file %s line %d element output in %s on line %d

Warning: XSLTProcessor::transformToXml(): xsltDocumentElem: write rights for %s/bug54446test_with_ini.txt denied in %s on line %d
OK, no file created
OK, file exists

Warning: XSLTProcessor::transformToXml(): runtime error: file %s line %s element output in %s on line %d

Warning: XSLTProcessor::transformToXml(): File write for %s/bug54446test_with_ini.txt refused in %s on line %d

Warning: XSLTProcessor::transformToXml(): runtime error: file %s line %d element output in %s on line %d

Warning: XSLTProcessor::transformToXml(): xsltDocumentElem: write rights for %s/bug54446test_with_ini.txt denied in %s on line %d
OK, no file created
--CREDITS--
Christian Stocker, chregu@php.net