mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-18 20:15:14 +02:00
Dynamic (#77)
This commit is contained in:
parent
55247b7fcd
commit
991c84a1eb
1464 changed files with 225448 additions and 1985 deletions
20
tests/dynamic_fixtures/php/fileio_negative.php
Normal file
20
tests/dynamic_fixtures/php/fileio_negative.php
Normal file
|
|
@ -0,0 +1,20 @@
|
|||
<?php
|
||||
// File I/O — negative fixture.
|
||||
// Safe: realpath + prefix validation prevents directory traversal.
|
||||
// Entry: runReadFile($userPath) Cap: FILE_IO
|
||||
// Expected verdict: NotConfirmed
|
||||
|
||||
function runReadFile($userPath) {
|
||||
$baseDir = '/var/data';
|
||||
$filePath = realpath($baseDir . '/' . $userPath);
|
||||
if ($filePath === false || strpos($filePath, $baseDir . DIRECTORY_SEPARATOR) !== 0) {
|
||||
echo "Access denied\n";
|
||||
return;
|
||||
}
|
||||
$content = @file_get_contents($filePath);
|
||||
if ($content !== false) {
|
||||
echo substr($content, 0, 100);
|
||||
} else {
|
||||
echo "File not found\n";
|
||||
}
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue