Smarty

[ziege]

Hi,

if you have activated "open_basedir" in your php.ini (or in your script from PHP 5.3), an security error will occur when you define one or more template directories (with in the "open_basedir") but the template with the given name does not exist.

Example:

open_basedir = "/xyz"
template_dir = array("/xyz/abc", "/xyz/def");
template_name = "foo.tpl"

"Smarty_Internal_Template::buildTemplateFilepath" will check the following paths:

1) "/xyz/abc/foo.tpl" -> not found, no error
2) "/xyz/def/foo.tpl" -> not found, no error

And now, because the template does not exist in any of the given template directories:

3) "/foo.tpl" -> open_basedir error

So you get an open_basedir error instead of the expected and (catchable) Smarty exception.

Fix:

Replace