Fix bug #77967 - Bypassing open_basedir restrictions via file uris

Author: smalyshev

ext/sqlite3/sqlite3.c

@@ -2012,8 +2012,16 @@ static int php_sqlite3_authorizer(void *autharg, int access_type, const char *ar
 					return SQLITE_DENY;
 				}
 #endif
-
-				if (php_check_open_basedir(arg3 TSRMLS_CC)) {
+				if (strncmp(arg3, "file:", 5) == 0) {
+					/* starts with "file:" */
+					if (!arg3[5]) {
+						return SQLITE_DENY;
+					}
+					if (php_check_open_basedir(arg3 + 5 TSRMLS_CC)) {
+						return SQLITE_DENY;
+					}
+				}
+                if (php_check_open_basedir(arg3 TSRMLS_CC)) {
 					return SQLITE_DENY;
 				}
 			}