the-djmaze/snappymail
1
1
Fork 0
mirror of https://github.com/the-djmaze/snappymail.git synced 2025-02-24 14:57:26 +08:00
Code Issues Projects Releases Packages Wiki Activity

#208 Block GPG when using open_basedir

Browse source
This commit is contained in:
the-djmaze 2022-02-03 21:49:08 +01:00
parent fb1c0dd606
commit 25d946b873
1 changed files with 16 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
snappymail/v/0.0.0/app/libraries/snappymail/pgp/gpg.php
View file

@ -1381,20 +1381,22 @@ class GPG
private static function findBinary($name) : ?string
{
$binary = \trim(`which $name`);
if ($binary && \is_executable($binary)) {
return $binary;
}
$locations = [
'/sw/bin/',
'/usr/bin/',
'/usr/local/bin/',
'/opt/local/bin/',
'/run/current-system/sw/bin/'
];
foreach ($locations as $location) {
if (\is_executable($location . $name)) {
return $location . $name;
if (!\ini_get('open_basedir')) {
$binary = \trim(`which $name`);
if ($binary && \is_executable($binary)) {
return $binary;
}
$locations = [
'/sw/bin/',
'/usr/bin/',
'/usr/local/bin/',
'/opt/local/bin/',
'/run/current-system/sw/bin/'
];
foreach ($locations as $location) {
if (\is_executable($location . $name)) {
return $location . $name;
}
}
}
return null;