Title: Unserialize function warning in PDb_Update.class.php
Last modified: July 1, 2017

---

# Unserialize function warning in PDb_Update.class.php

 *  [IT247365](https://wordpress.org/support/users/it247365/)
 * (@it247365)
 * [8 years, 11 months ago](https://wordpress.org/support/topic/unserialize-function-warning-in-pdb_update-class-php/)
 * unserialize() [function.unserialize]:
    File: participants-database/classes/PDb_Update.
   class.php Line: 143
 *     ```
       /**
          * Get information about the remote version
          * @return bool|object
          */
         public function getRemote_information()
         {
           $request = wp_remote_post($this->update_path, array('body' => array('action' => 'info')));
           if (!is_wp_error($request) || wp_remote_retrieve_response_code($request) === 200) {
             return unserialize($request['body']);
           }
           return false;
         }
       ```
   
 * [Warning](http://php.net/manual/en/function.unserialize.php)
    Do not pass untrusted
   user input to unserialize() regardless of the options value of allowed_classes.
   Unserialization can result in code being loaded and executed due to object instantiation
   and autoloading, and a malicious user may be able to exploit this.

Viewing 1 replies (of 1 total)

 *  Plugin Author [Roland Barker](https://wordpress.org/support/users/xnau/)
 * (@xnau)
 * [8 years, 11 months ago](https://wordpress.org/support/topic/unserialize-function-warning-in-pdb_update-class-php/#post-9280264)
 * thanks for this, I’ll get a fix for this in the next release.

Viewing 1 replies (of 1 total)

The topic ‘Unserialize function warning in PDb_Update.class.php’ is closed to new
replies.

 * ![](https://ps.w.org/participants-database/assets/icon-256x256.jpg?rev=1389807)
 * [Participants Database](https://wordpress.org/plugins/participants-database/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/participants-database/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/participants-database/)
 * [Active Topics](https://wordpress.org/support/plugin/participants-database/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/participants-database/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/participants-database/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [Roland Barker](https://wordpress.org/support/users/xnau/)
 * Last activity: [8 years, 11 months ago](https://wordpress.org/support/topic/unserialize-function-warning-in-pdb_update-class-php/#post-9280264)
 * Status: not resolved