Uploaded image for project: 'Blesta Core'
  1. Blesta Core
  2. CORE-2943

Replace serialization with JSON where possible

    Details

    • Type: Epic
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None
    • Epic Name:
      Serialization to JSON

      Description

      In many places we un/serialize data for various purposes, but some of these locations may be updated to use JSON instead for simplicity, readability, and security (in cases where a potentially malicious class could be provided to serialization, see http://php.net/manual/en/function.unserialize.php).

      Therefore, we should make an effort to replace serialization with JSON where it makes sense to do so. One of these locations is database logging, particularly module/gateway logs where we receive input from an API (or perhaps a malicious user).

      1. Update modules and gateways to use json_encode and json_decode instead of serialization for logging certain data where appropriate
        • This should be done with backward-compatibility in mind

        Issue Links

          Issues in Epic

          There are no issues in this epic.

            Activity

            There are no comments yet on this issue.

              People

              • Assignee:
                Unassigned
                Reporter:
                tyson Tyson Phillips (Inactive)
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated: