From 83d483831a5ecaca842fd4e99039924b2ad141e0 Mon Sep 17 00:00:00 2001 From: Julio Montoya Date: Tue, 13 Mar 2012 13:49:18 +0100 Subject: [PATCH] Cleaning array when saving LOG_USER_OBJECT --- main/inc/lib/events.lib.inc.php | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/main/inc/lib/events.lib.inc.php b/main/inc/lib/events.lib.inc.php index b0326ac3bf..1414ca4f08 100644 --- a/main/inc/lib/events.lib.inc.php +++ b/main/inc/lib/events.lib.inc.php @@ -551,6 +551,22 @@ function event_system($event_type, $event_value_type, $event_value, $datetime = $event_type = Database::escape_string($event_type); $event_value_type = Database::escape_string($event_value_type); + + //Clean the user_info + if ($event_value_type == LOG_USER_OBJECT) { + if (is_array($event_value)) { + unset($event_value['complete_name']); + unset($event_value['firstName']); + unset($event_value['lastName']); + unset($event_value['avatar_small']); + unset($event_value['avatar']); + unset($event_value['password']); + unset($event_value['lastLogin']); + unset($event_value['picture_uri']); + + $event_value = serialize($event_value); + } + } $event_value = Database::escape_string($event_value); $datetime = Database::escape_string($datetime); $user_id = Database::escape_string($user_id);