From a70a274eaa274510f9bee49bf43ecf3991c129a4 Mon Sep 17 00:00:00 2001 From: mistic100 Date: Tue, 3 Jun 2014 15:05:14 +0000 Subject: feature 3038 : always apply serialize&addslashes if object/array is passed and not parser is defined git-svn-id: http://piwigo.org/svn/trunk@28621 68402e56-0260-453c-a942-63ccdbb3a9ee --- include/functions.inc.php | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'include/functions.inc.php') diff --git a/include/functions.inc.php b/include/functions.inc.php index 03d87dfa5..9c919994f 100644 --- a/include/functions.inc.php +++ b/include/functions.inc.php @@ -1172,6 +1172,10 @@ function conf_update_param($param, $value, $updateGlobal=false, $parser=null) { $dbValue = call_user_func($parser, $value); } + else if (is_array($value) || is_object($value)) + { + $dbValue = addslashes(serialize($value)); + } else { $dbValue = $value; -- cgit v1.2.3