feature 3038 : always apply serialize&addslashes if object/array is passed and not parser is defined

git-svn-id: http://piwigo.org/svn/trunk@28621 68402e56-0260-453c-a942-63ccdbb3a9ee

1 files changed, 4 insertions, 0 deletions

diff --git a/include/functions.inc.php b/include/functions.inc.php
index 03d87dfa5..9c919994f 100644
--- a/include/functions.inc.php
+++ b/include/functions.inc.php
@@ -1172,6 +1172,10 @@ function conf_update_param($param, $value, $updateGlobal=false, $parser=null)
   {
     $dbValue = call_user_func($parser, $value);
   }
+  else if (is_array($value) || is_object($value))
+  {
+    $dbValue = addslashes(serialize($value));
+  }
   else
   {
     $dbValue = $value;