From: <var...@us...> - 2021-09-03 11:30:27
|
Revision: 10535 http://sourceforge.net/p/phpwiki/code/10535 Author: vargenau Date: 2021-09-03 11:30:25 +0000 (Fri, 03 Sep 2021) Log Message: ----------- PDO: better check _unserialize Modified Paths: -------------- trunk/lib/WikiDB/backend/PDO.php Modified: trunk/lib/WikiDB/backend/PDO.php =================================================================== --- trunk/lib/WikiDB/backend/PDO.php 2021-09-03 10:18:08 UTC (rev 10534) +++ trunk/lib/WikiDB/backend/PDO.php 2021-09-03 11:30:25 UTC (rev 10535) @@ -1273,7 +1273,13 @@ */ function _unserialize($data) { - return empty($data) ? array() : unserialize($data); + if ($data === "") { + return array(); + } else if (is_string($data)) { + return unserialize($data); + } else { + return array(); + } } /* some variables and functions for DB backend abstraction (action=upgrade) */ This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |