|
From: <var...@us...> - 2021-09-03 11:30:27
|
Revision: 10535
http://sourceforge.net/p/phpwiki/code/10535
Author: vargenau
Date: 2021-09-03 11:30:25 +0000 (Fri, 03 Sep 2021)
Log Message:
-----------
PDO: better check _unserialize
Modified Paths:
--------------
trunk/lib/WikiDB/backend/PDO.php
Modified: trunk/lib/WikiDB/backend/PDO.php
===================================================================
--- trunk/lib/WikiDB/backend/PDO.php 2021-09-03 10:18:08 UTC (rev 10534)
+++ trunk/lib/WikiDB/backend/PDO.php 2021-09-03 11:30:25 UTC (rev 10535)
@@ -1273,7 +1273,13 @@
*/
function _unserialize($data)
{
- return empty($data) ? array() : unserialize($data);
+ if ($data === "") {
+ return array();
+ } else if (is_string($data)) {
+ return unserialize($data);
+ } else {
+ return array();
+ }
}
/* some variables and functions for DB backend abstraction (action=upgrade) */
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|