Browse Source

prevent frontend updating of feeds on view if open_basedir is set to prevent plugins potentially not working correctly (i.e. if backend system has open_basedir disabled)

Andrew Dolgov 8 years ago
parent
commit
29c92d7b08
2 changed files with 4 additions and 2 deletions
  1. 3 1
      classes/api.php
  2. 1 1
      classes/feeds.php

+ 3 - 1
classes/api.php

@@ -416,7 +416,9 @@ class API extends Handler {
 
 		$feed_id = (int) $this->dbh->escape_string($_REQUEST["feed_id"]);
 
-		update_rss_feed($feed_id, true);
+		if (!ini_get("open_basedir")) {
+			update_rss_feed($feed_id, true);
+		}
 
 		$this->wrap(self::STATUS_OK, array("status" => "OK"));
 	}

+ 1 - 1
classes/feeds.php

@@ -166,7 +166,7 @@ class Feeds extends Handler_Protected {
 
 		$method_split = explode(":", $method);
 
-		if ($method == "ForceUpdate" && $feed > 0 && is_numeric($feed)) {
+		if ($method == "ForceUpdate" && $feed > 0 && is_numeric($feed) && !ini_get("open_basedir")) {
 			// Update the feed if required with some basic flood control
 
 			$result = $this->dbh->query(