chamilo
/
chamilo-lms
mirror of https://github.com/chamilo/chamilo-lms/tree/1.11.x
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

Add function to wrap Unserialize::unserialize function

Browse Source
pull/2821/head
Angel Fernando Quiroz Campos 7 years ago
parent 45e885b7fd
commit fa8b097564
23 changed files with 152 additions and 239 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 16
      main/admin/career_diagram.php
  2. 6
      main/admin/gradebook_list.php
  3. 7
      main/auth/sso/sso.Drupal.class.php
  4. 7
      main/auth/sso/sso.class.php
  5. 13
      main/course_home/course_home.php
  6. 16
      main/exercise/hotspot_admin.inc.php
  7. 7
      main/exercise/question.class.php
  8. 15
      main/exercise/upload_exercise.php
  9. 7
      main/extra/upgrade_school_calendar.php
  10. 6
      main/gradebook/lib/be/category.class.php
  11. 113
      main/inc/lib/api.lib.php
  12. 3
      main/inc/lib/array.lib.php
  13. 6
      main/inc/lib/plugin.class.php
  14. 6
      main/inc/lib/plugin.lib.php
  15. 7
      main/inc/lib/statistics.lib.php
  16. 15
      main/lp/aicc_api.php
  17. 16
      main/lp/aicc_hacp.php
  18. 15
      main/lp/learnpath.class.php
  19. 17
      main/lp/lp_controller.php
  20. 16
      main/mySpace/my_career.php
  21. 6
      plugin/ims_lti/Entity/ImsLtiTool.php
  22. 65
      src/Chamilo/CourseBundle/Component/CourseCopy/CourseArchiver.php
  23. 6
      src/Chamilo/PageBundle/Entity/User.php

16
main/admin/career_diagram.php
Unescape View File

@ -14,11 +14,7 @@ UPDATE extra_field_values SET updated_at = NULL WHERE CAST(updated_at AS CHAR(20
ALTER TABLE extra_field_values modify column value longtext null;
*/
use Brumann\Polyfill\Unserialize;
use Fhaculty\Graph\Graph;
use Fhaculty\Graph\Set\Edges;
use Fhaculty\Graph\Set\Vertices;
use Fhaculty\Graph\Set\VerticesMap;
$cidReset = true;
require_once __DIR__.'/../inc/global.inc.php';
@ -113,17 +109,7 @@ $tpl = new Template(get_lang('Diagram'));
$html = Display::page_subheader2($careerInfo['name'].$urlToString);
if (!empty($item) && isset($item['value']) && !empty($item['value'])) {
/** @var Graph $graph */
$graph = Unserialize::unserialize(
$item['value'],
[
'allowed_classes' => [
Graph::class,
VerticesMap::class,
Vertices::class,
Edges::class,
],
]
);
$graph = api_unserialize_content('carrer', $item['value']);
$html .= Career::renderDiagramByColumn($graph, $tpl);
} else {
Display::addFlash(

6
main/admin/gradebook_list.php
Unescape View File

@ -1,7 +1,6 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
use Chamilo\CoreBundle\Entity\GradebookCategory;
use Doctrine\Common\Collections\Criteria;
use Knp\Component\Pager\Paginator;
@ -189,10 +188,7 @@ switch ($action) {
$options = [];
if (!empty($categoryData['depends'])) {
$list = Unserialize::unserialize(
$categoryData['depends'],
['allowed_classes' => false]
);
$list = api_unserialize_content('not_allowed_classes', $categoryData['depends']);
foreach ($list as $itemId) {
$courseInfo = api_get_course_info_by_id($itemId);
$options[$itemId] = $courseInfo['name'];

7
main/auth/sso/sso.Drupal.class.php
Unescape View File

@ -1,7 +1,6 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
use ChamiloSession as Session;
/**
@ -294,9 +293,9 @@ class ssoDrupal
*/
private function decode_cookie($cookie)
{
return Unserialize::unserialize(
base64_decode($cookie),
['allowed_classes' => false]
return api_unserialize_content(
'not_allowed_classes',
base64_decode($cookie)
);
}
}

7
main/auth/sso/sso.class.php
Unescape View File

@ -1,7 +1,6 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
use ChamiloSession as Session;
/**
@ -297,9 +296,9 @@ class sso
*/
private function decode_cookie($cookie)
{
return Unserialize::unserialize(
base64_decode($cookie),
['allowed_classes' => false]
return api_unserialize_content(
'not_allowed_classes',
base64_decode($cookie)
);
}
}

13
main/course_home/course_home.php
Unescape View File

@ -1,12 +1,8 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
use ChamiloSession as Session;
use Fhaculty\Graph\Graph;
use Fhaculty\Graph\Set\Edges;
use Fhaculty\Graph\Set\Vertices;
use Fhaculty\Graph\Set\VerticesMap;
/**
* HOME PAGE FOR EACH COURSE.
@ -397,11 +393,10 @@ if ($allow === true) {
);
if (!empty($item) && isset($item['value']) && !empty($item['value'])) {
$graph = Unserialize::unserialize(
$item['value'],
[
'allowed_classes' => [Graph::class, VerticesMap::class, Vertices::class, Edges::class],
]
/** @var Graph $graph */
$graph = api_unserialize_content(
'career',
$item['value']
);
$diagram = Career::renderDiagram($careerInfo, $graph);
}

16
main/exercise/hotspot_admin.inc.php
Unescape View File

@ -1,7 +1,6 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
use ChamiloSession as Session;
/**
@ -57,14 +56,13 @@ if ($modifyIn) {
$objAnswer = new Answer($questionId);
}
$color = Unserialize::unserialize($color, ['allowed_classes' => false]);
$reponse = Unserialize::unserialize($reponse, ['allowed_classes' => false]);
$comment = Unserialize::unserialize($comment, ['allowed_classes' => false]);
$comment = Unserialize::unserialize($comment, ['allowed_classes' => false]);
$weighting = Unserialize::unserialize($weighting, ['allowed_classes' => false]);
$hotspot_coordinates = Unserialize::unserialize($hotspot_coordinates, ['allowed_classes' => false]);
$hotspot_type = Unserialize::unserialize($hotspot_type, ['allowed_classes' => false]);
$destination = Unserialize::unserialize($destination, ['allowed_classes' => false]);
$color = api_unserialize_content('not_allowed_classes', $color);
$reponse = api_unserialize_content('not_allowed_classes', $reponse);
$comment = api_unserialize_content('not_allowed_classes', $comment);
$weighting = api_unserialize_content('not_allowed_classes', $weighting);
$hotspot_coordinates = api_unserialize_content('not_allowed_classes', $hotspot_coordinates);
$hotspot_type = api_unserialize_content('not_allowed_classes', $hotspot_type);
$destination = api_unserialize_content('not_allowed_classes', $destination);
unset($buttonBack);
}

7
main/exercise/question.class.php
Unescape View File

@ -1,7 +1,6 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
use Chamilo\CourseBundle\Entity\CQuizAnswer;
/**
@ -1146,9 +1145,9 @@ abstract class Question
$se_doc = $di->get_document((int) $se_ref['search_did']);
if ($se_doc !== false) {
if (($se_doc_data = $di->get_document_data($se_doc)) !== false) {
$se_doc_data = Unserialize::unserialize(
$se_doc_data,
['allowed_classes' => false]
$se_doc_data = api_unserialize_content(
'not_allowed_classes',
$se_doc_data
);
if (isset($se_doc_data[SE_DATA]['type']) &&
$se_doc_data[SE_DATA]['type'] == SE_DOCTYPE_EXERCISE_QUESTION

15
main/exercise/upload_exercise.php
Unescape View File

@ -1,7 +1,6 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
use ChamiloSession as Session;
/**
@ -550,19 +549,7 @@ function lp_upload_quiz_action_handling()
if (!empty($lpObject)) {
/** @var learnpath $oLP */
$oLP = Unserialize::unserialize(
$lpObject,
[
'allowed_classes' => [
learnpath::class,
learnpathItem::class,
aiccItem::class,
scormItem::class,
Link::class,
LpItem::class,
],
]
);
$oLP = api_unserialize_content('lp', $lpObject);
if (is_object($oLP)) {
if ((empty($oLP->cc)) || $oLP->cc != api_get_course_id()) {
$oLP = null;

7
main/extra/upgrade_school_calendar.php
Unescape View File

@ -2,7 +2,6 @@
/* For licensing terms, see /license.txt */
// not used??
use Brumann\Polyfill\Unserialize;
exit;
@ -31,9 +30,9 @@ $d_number = (int) $d_number;
$sql4 = "UPDATE set_module SET cal_day_num = $d_number WHERE id = $d_id ";
Database::query($sql4);
print_r(
Unserialize::unserialize(
Security::remove_XSS($_POST['aaa']),
['allowed_classes' => false]
api_unserialize_content(
'not_allowed_classes',
Security::remove_XSS($_POST['aaa'])
)
);

6
main/gradebook/lib/be/category.class.php
Unescape View File

@ -1,7 +1,6 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
use Chamilo\CoreBundle\Entity\GradebookCategory;
use ChamiloSession as Session;
@ -267,10 +266,7 @@ class Category implements GradebookItem
{
$this->courseDependency = [];
$unserialized = @Unserialize::unserialize(
$value,
['allowed_classes' => false]
);
$unserialized = api_unserialize_content('not_allowed_classes', $value, true);
if (false !== $unserialized) {
$this->courseDependency = $unserialized;

113
main/inc/lib/api.lib.php
Unescape View File

@ -3,9 +3,41 @@
use Brumann\Polyfill\Unserialize;
use Chamilo\CoreBundle\Entity\SettingsCurrent;
use Chamilo\CourseBundle\Component\CourseCopy\Course;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Announcement;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Attendance;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\CalendarEvent;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\CourseCopyLearnpath;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\CourseCopyTestCategory;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\CourseDescription;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\CourseSession;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Document;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Forum;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\ForumCategory;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\ForumPost;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\ForumTopic;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Glossary;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\GradeBookBackup;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Link;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\LinkCategory;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Quiz;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\QuizQuestion;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\QuizQuestionOption;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\ScormDocument;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Survey;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\SurveyInvitation;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\SurveyQuestion;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Thematic;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\ToolIntro;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Wiki;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Work;
use Chamilo\CourseBundle\Entity\CItemProperty;
use Chamilo\UserBundle\Entity\User;
use ChamiloSession as Session;
use Fhaculty\Graph\Graph;
use Fhaculty\Graph\Set\Edges;
use Fhaculty\Graph\Set\Vertices;
use Fhaculty\Graph\Set\VerticesMap;
use Symfony\Component\Finder\Finder;
/**
@ -2768,10 +2800,7 @@ function api_get_plugin_setting($plugin, $variable)
if (isset($result[$plugin])) {
$value = $result[$plugin];
$unserialized = @Unserialize::unserialize(
$value,
['allowed_classes' => false]
);
$unserialized = api_unserialize_content('not_allowed_classes', $value, true);
if (false !== $unserialized) {
$value = $unserialized;
@ -9305,3 +9334,79 @@ function api_get_relative_path($from, $to)
return implode('/', $relPath);
}
/**
* Unserialize content using Brummann\Polyfill\Unserialize.
*
* @param string $type
* @param string $serialized
* @param bool $ignoreErrors. Optional.
*
* @return mixed
*/
function api_unserialize_content($type, $serialized, $ignoreErrors = false)
{
switch ($type) {
case 'career':
$allowedClasses = [Graph::class, VerticesMap::class, Vertices::class, Edges::class];
break;
case 'lp':
$allowedClasses = [
learnpath::class,
learnpathItem::class,
aiccItem::class,
scormItem::class,
Link::class,
LpItem::class,
];
break;
case 'course':
$allowedClasses = [
Course::class,
Announcement::class,
Attendance::class,
CalendarEvent::class,
CourseCopyLearnpath::class,
CourseCopyTestCategory::class,
CourseDescription::class,
CourseSession::class,
Document::class,
Forum::class,
ForumCategory::class,
ForumPost::class,
ForumTopic::class,
Glossary::class,
GradeBookBackup::class,
Link::class,
LinkCategory::class,
Quiz::class,
QuizQuestion::class,
QuizQuestionOption::class,
ScormDocument::class,
Survey::class,
SurveyInvitation::class,
SurveyQuestion::class,
Thematic::class,
ToolIntro::class,
Wiki::class,
Work::class,
stdClass::class,
];
break;
case 'not_allowed_classes':
default:
$allowedClasses = false;
}
if ($ignoreErrors) {
return @Unserialize::unserialize(
$serialized,
['allowed_classes' => $allowedClasses]
);
}
return Unserialize::unserialize(
$serialized,
['allowed_classes' => $allowedClasses]
);
}

3
main/inc/lib/array.lib.php
Unescape View File

@ -6,7 +6,6 @@
*
* @package chamilo.library
*/
use Brumann\Polyfill\Unserialize;
/**
* Removes duplicate values from a dimensional array.
@ -28,7 +27,7 @@ function array_unique_dimensional($array)
$array = array_unique($array);
foreach ($array as &$myvalue) {
$myvalue = Unserialize::unserialize($myvalue, ['allowed_classes' => false]);
$myvalue = api_unserialize_content('not_allowed_clases', $myvalue);
}
return $array;

6
main/inc/lib/plugin.class.php
Unescape View File

@ -1,7 +1,6 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
use Chamilo\CourseBundle\Entity\CTool;
/**
@ -323,10 +322,7 @@ class Plugin
$settings = $this->get_settings();
foreach ($settings as $setting) {
if ($setting['variable'] == $this->get_name().'_'.$name) {
$unserialized = @Unserialize::unserialize(
$setting['selected_value'],
['allowed_classes' => false]
);
$unserialized = api_unserialize_content('not_allowed_classes', $setting['selected_value'], true);
if (!empty($setting['selected_value']) &&
false !== $unserialized

6
main/inc/lib/plugin.lib.php
Unescape View File

@ -1,7 +1,6 @@
<?php
/* See license terms in /license.txt */
use Brumann\Polyfill\Unserialize;
use ChamiloSession as Session;
/**
@ -438,10 +437,7 @@ class AppPlugin
$settings_filtered = [];
foreach ($plugin_settings as $item) {
if (!empty($item['selected_value'])) {
$unserialized = @Unserialize::unserialize(
$item['selected_value'],
['allowed_classes' => false]
);
$unserialized = api_unserialize_content('not_allowed_classes', $item['selected_value'], true);
if (false !== $unserialized) {
$item['selected_value'] = $unserialized;
}

7
main/inc/lib/statistics.lib.php
Unescape View File

@ -1,8 +1,6 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
/**
* This class provides some functions for statistics.
*
@ -307,10 +305,7 @@ class Statistics
} else {
if (!empty($row[2])) {
$originalData = str_replace('\\', '', $row[2]);
$row[2] = Unserialize::unserialize(
$originalData,
['allowed_classes' => false]
);
$row[2] = api_unserialize_content('not_allowed_classes', $originalData);
if (is_array($row[2]) && !empty($row[2])) {
$row[2] = implode_with_key(', ', $row[2]);
} else {

15
main/lp/aicc_api.php
Unescape View File

@ -1,7 +1,6 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
use ChamiloSession as Session;
/**
@ -37,19 +36,7 @@ require_once __DIR__.'/../inc/global.inc.php';
// Is this needed? This is probabaly done in the header file.
$file = Session::read('file');
/** @var learnpath $oLP */
$oLP = Unserialize::unserialize(
Session::read('lpobject'),
[
'allowed_classes' => [
learnpath::class,
learnpathItem::class,
aiccItem::class,
scormItem::class,
Link::class,
LpItem::class,
],
]
);
$oLP = api_unserialize_content('lp', Session::read('lpobject'));
$oItem = $oLP->items[$oLP->current];
if (!is_object($oItem)) {
error_log('New LP - scorm_api - Could not load oItem item', 0);

16
main/lp/aicc_hacp.php
Unescape View File

@ -1,7 +1,6 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
use ChamiloSession as Session;
/**
@ -65,18 +64,9 @@ if ($debug > 2) {
// Is this needed? This is probabaly done in the header file.
$file = Session::read('file');
/** @var learnpath $oLP */
$oLP = Unserialize::unserialize(
Session::read('lpobject'),
[
'allowed_classes' => [
learnpath::class,
learnpathItem::class,
aiccItem::class,
scormItem::class,
Link::class,
LpItem::class,
],
]
$oLP = api_unserialize_content(
'not_allowed_classes',
Session::read('lpobject')
);
$oItem = &$oLP->items[$oLP->current];
if (!is_object($oItem)) {

15
main/lp/learnpath.class.php
Unescape View File

@ -1,7 +1,6 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
use Chamilo\CoreBundle\Entity\Repository\CourseRepository;
use Chamilo\CoreBundle\Entity\Repository\ItemPropertyRepository;
use Chamilo\CourseBundle\Component\CourseCopy\CourseArchiver;
@ -12691,19 +12690,7 @@ EOD;
$learnPath = null;
$lpObject = Session::read('lpobject');
if ($lpObject !== null) {
$learnPath = Unserialize::unserialize(
$lpObject,
[
'allowed_classes' => [
learnpath::class,
learnpathItem::class,
aiccItem::class,
scormItem::class,
Link::class,
LpItem::class,
],
]
);
$learnPath = api_unserialize_content('lp', $lpObject);
if ($debug) {
error_log('getLpFromSession: unserialize');
error_log('------getLpFromSession------');

17
main/lp/lp_controller.php
Unescape View File

@ -1,7 +1,6 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
use ChamiloSession as Session;
/**
@ -215,20 +214,8 @@ if (!empty($lpObject)) {
if ($debug) {
error_log(' SESSION[lpobject] is defined');
}
/** @var learnpath $olP */
$olP = Unserialize::unserialize(
$lpObject,
[
'allowed_classes' => [
learnpath::class,
learnpathItem::class,
aiccItem::class,
scormItem::class,
Link::class,
LpItem::class,
],
]
);
/** @var learnpath $oLP */
$oLP = api_unserialize_content('lp', $lpObject);
if (isset($oLP) && is_object($oLP)) {
if ($debug) {
error_log(' oLP is object');

16
main/mySpace/my_career.php
Unescape View File

@ -1,11 +1,7 @@
<?php
/* For licensing terms, see /license.txt */
use Brumann\Polyfill\Unserialize;
use Fhaculty\Graph\Graph;
use Fhaculty\Graph\Set\Edges;
use Fhaculty\Graph\Set\Vertices;
use Fhaculty\Graph\Set\VerticesMap;
require_once __DIR__.'/../inc/global.inc.php';
@ -48,17 +44,7 @@ foreach ($sessionCategories as $category) {
);
if ($diagram && !empty($diagram['value'])) {
/** @var Graph $graph */
$graph = Unserialize::unserialize(
$diagram['value'],
[
'allowed_classess' => [
Graph::class,
VerticesMap::class,
Vertices::class,
Edges::class,
],
]
);
$graph = api_unserialize_content('career', $diagram['value']);
$content .= Career::renderDiagram($careerInfo, $graph);
}
}

6
plugin/ims_lti/Entity/ImsLtiTool.php
Unescape View File

@ -3,7 +3,6 @@
namespace Chamilo\PluginBundle\Entity\ImsLti;
use Brumann\Polyfill\Unserialize;
use Chamilo\CoreBundle\Entity\Course;
use Chamilo\CoreBundle\Entity\GradebookEvaluation;
use Doctrine\Common\Collections\ArrayCollection;
@ -466,10 +465,7 @@ class ImsLtiTool
*/
public function unserializePrivacy()
{
return Unserialize::unserialize(
$this->privacy,
['allowed_classes' => false]
);
return api_unserialize_content('not_allowed_classes', $this->privacy);
}
/**

65
src/Chamilo/CourseBundle/Component/CourseCopy/CourseArchiver.php
Unescape View File

@ -3,35 +3,8 @@
namespace Chamilo\CourseBundle\Component\CourseCopy;
use Brumann\Polyfill\Unserialize;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Announcement;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Asset;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Attendance;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\CalendarEvent;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\CourseCopyLearnpath;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\CourseCopyTestCategory;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\CourseDescription;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\CourseSession;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Document;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Forum;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\ForumCategory;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\ForumPost;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\ForumTopic;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Glossary;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\GradeBookBackup;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Link;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\LinkCategory;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Quiz;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\QuizQuestion;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\QuizQuestionOption;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\ScormDocument;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Survey;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\SurveyInvitation;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\SurveyQuestion;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Thematic;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\ToolIntro;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Wiki;
use Chamilo\CourseBundle\Component\CourseCopy\Resources\Work;
use Symfony\Component\Filesystem\Filesystem;
/**
@ -370,42 +343,8 @@ class CourseArchiver
class_alias('Chamilo\CourseBundle\Component\CourseCopy\Resources\Wiki', 'Wiki');
class_alias('Chamilo\CourseBundle\Component\CourseCopy\Resources\Work', 'Work');
$course = Unserialize::unserialize(
base64_decode($contents),
[
'allowed_classes' => [
Course::class,
Announcement::class,
Attendance::class,
CalendarEvent::class,
CourseCopyLearnpath::class,
CourseCopyTestCategory::class,
CourseDescription::class,
CourseSession::class,
Document::class,
Forum::class,
ForumCategory::class,
ForumPost::class,
ForumTopic::class,
Glossary::class,
GradeBookBackup::class,
Link::class,
LinkCategory::class,
Quiz::class,
QuizQuestion::class,
QuizQuestionOption::class,
ScormDocument::class,
Survey::class,
SurveyInvitation::class,
SurveyQuestion::class,
Thematic::class,
ToolIntro::class,
Wiki::class,
Work::class,
\stdClass::class,
],
]
);
/** @var Course $course */
$course = api_unserialize_content('course', base64_decode($contents));
if (!in_array(
get_class($course),

6
src/Chamilo/PageBundle/Entity/User.php
Unescape View File

@ -3,7 +3,6 @@
namespace Chamilo\PageBundle\Entity;
use Brumann\Polyfill\Unserialize;
use Chamilo\CoreBundle\Entity\ExtraFieldValues;
use Chamilo\CoreBundle\Entity\UsergroupRelUser;
use Doctrine\Common\Collections\ArrayCollection;
@ -2283,10 +2282,7 @@ class User extends BaseUser
*/
public function unserialize($serialized)
{
$data = Unserialize::unserialize(
$serialized,
['allowed_classes' => false]
);
$data = api_unserialize_content('not_allowed_classes', $serialized);
// add a few extra elements in the array to ensure that we have enough keys when unserializing
// older data which does not include all properties.
$data = array_merge($data, array_fill(0, 2, null));

Write Preview
Loading…
Cancel
Save