makary/phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-06-28 14:18:52 +00:00
Code Issues Projects Releases Packages Wiki Activity

[ticket/13740] Secure installer config against corrupted config data

Browse source 
PHPBB3-13740
This commit is contained in:
Mate Bartus 2015-07-23 04:27:31 +02:00
parent 3356130ce2
commit 98d9d92aa7
1 changed files with 12 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
phpBB/phpbb/install/helper/config.php
View file

@ -224,11 +224,19 @@ class config
$file_content = @file_get_contents($this->install_config_file);
$serialized_data = trim(substr($file_content, 8));
$unserialized_data = unserialize($serialized_data);
$this->installer_config = $unserialized_data['installer_config'];
$this->progress_data = $unserialized_data['progress_data'];
$this->navigation_data = $unserialized_data['navigation_data'];
$this->installer_config = array();
$this->progress_data = array();
$this->navigation_data = array();
if (!empty($serialized_data))
{
$unserialized_data = unserialize($serialized_data);
$this->installer_config = (is_array($unserialized_data['installer_config'])) ? $unserialized_data['installer_config'] : array();
$this->progress_data = (is_array($unserialized_data['progress_data'])) ? $unserialized_data['progress_data'] : array();
$this->navigation_data = (is_array($unserialized_data['navigation_data'])) ? $unserialized_data['navigation_data'] : array();
}
}
/**