[wp-trac] [WordPress Trac] #31317: is_serializable doesn't check for data created with a custom serialize

WordPress Trac noreply at wordpress.org
Fri Feb 13 02:35:36 UTC 2015


#31317: is_serializable doesn't check for data created with a custom serialize
--------------------------------+-----------------------------
 Reporter:  jamesgol            |      Owner:
     Type:  defect (bug)        |     Status:  new
 Priority:  normal              |  Milestone:  Awaiting Review
Component:  Options, Meta APIs  |    Version:  trunk
 Severity:  normal              |   Keywords:
  Focuses:                      |
--------------------------------+-----------------------------
 If someone uses a custom serialize as in
 [http://php.net/manual/en/class.serializable.php]

 The serialized string will look like this
 {{{
 C:3:"obj":23:{s:15:"My private data";}
 }}}

 WordPress will happily serialize an object like this and store it in the
 options table, but on retrieve the raw string is returned.  wp-
 includes/function.php:is_serialized() doesn't know about this type of
 string.  Patch included to fix this

--
Ticket URL: <https://core.trac.wordpress.org/ticket/31317>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list