• unserialize() [function.unserialize]:
    File: participants-database/classes/PDb_Update.class.php Line: 143

    /**
       * Get information about the remote version
       * @return bool|object
       */
      public function getRemote_information()
      {
        $request = wp_remote_post($this->update_path, array('body' => array('action' => 'info')));
        if (!is_wp_error($request) || wp_remote_retrieve_response_code($request) === 200) {
          return unserialize($request['body']);
        }
        return false;
      }

    Warning
    Do not pass untrusted user input to unserialize() regardless of the options value of allowed_classes. Unserialization can result in code being loaded and executed due to object instantiation and autoloading, and a malicious user may be able to exploit this.

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)

The topic ‘Unserialize function warning in PDb_Update.class.php’ is closed to new replies.