Changeset 4382 for trunk/wp-includes/pluggable.php

Timestamp:

10/12/2006 11:54:36 PM (19 years ago)

Author:

markjaquith

Message:

Prevent users from entering strings that will be interpreted as serialized arrays/objects on the way out. fixes #2591

File:

• trunk/wp-includes/pluggable.php (modified) (2 diffs)

trunk/wp-includes/pluggable.php

@@ -79 +79 @@
     if ($metavalues) {
         foreach ( $metavalues as $meta ) {
-            @ $value = unserialize($meta->meta_value);
-            if ($value === FALSE)
-                $value = $meta->meta_value;
+            $value = maybe_unserialize($meta->meta_value);
             $user->{$meta->meta_key} = $value;
 
@@ -132 +130 @@
     if ($metavalues) {
         foreach ( $metavalues as $meta ) {
-            @ $value = unserialize($meta->meta_value);
-            if ($value === FALSE)
-                $value = $meta->meta_value;
+            $value = maybe_unserialize($meta->meta_value);
             $user->{$meta->meta_key} = $value;