From 812e4958cf27b389f9aee959ae63e710e0d3abcc Mon Sep 17 00:00:00 2001 From: Brad Jorsch Date: Mon, 25 Apr 2016 08:14:58 -0700 Subject: [PATCH] SECURITY: Check for mbstring.func_overload at runtime The installer already checks for this, let's also catch the case when someone enables this after installation. Bug: T122807 Change-Id: Ieddbc932f482d52da1688d472f494074c81124b2 --- includes/WebStart.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/includes/WebStart.php b/includes/WebStart.php index f5a4f93..e75e97f 100644 --- a/includes/WebStart.php +++ b/includes/WebStart.php @@ -40,6 +40,9 @@ if ( function_exists( 'get_magic_quotes_gpc' ) && get_magic_quotes_gpc() ) { . 'for help on how to disable magic quotes.' ); } +if ( ini_get( 'mbstring.func_overload' ) ) { + die( 'MediaWiki does not support installations where mbstring.func_overload is non-zero.' ); +} # bug 15461: Make IE8 turn off content sniffing. Everybody else should ignore this # We're adding it here so that it's *always* set, even for alternate entry -- 2.6.6