Unserialize function warning in PDb_Update.class.php
-
unserialize() [function.unserialize]:
File: participants-database/classes/PDb_Update.class.php Line: 143/** * Get information about the remote version * @return bool|object */ public function getRemote_information() { $request = wp_remote_post($this->update_path, array('body' => array('action' => 'info'))); if (!is_wp_error($request) || wp_remote_retrieve_response_code($request) === 200) { return unserialize($request['body']); } return false; }Warning
Do not pass untrusted user input to unserialize() regardless of the options value of allowed_classes. Unserialization can result in code being loaded and executed due to object instantiation and autoloading, and a malicious user may be able to exploit this.
Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
The topic ‘Unserialize function warning in PDb_Update.class.php’ is closed to new replies.