unread
As stated in the manual for str_pad() "If the value of pad_length is
negative or less than the length of the input string, no padding takes
place.".
By using a very low negative value it is possible to bypass the check.
Please see attachment.
Cheers, Mattias Bengtsson
unread
Patch applied to both PHP_5_2 and HEAD. Thanks!
--Jani
As stated in the manual for
str_pad()"If the value of pad_length is
negative or less than the length of the input string, no padding takes
place.".By using a very low negative value it is possible to bypass the check.
Please see attachment.
Cheers, Mattias Bengtsson