| @@ -257,9 +257,9 @@ | ||
| 257 | 257 | { |
| 258 | 258 | if(is_array($results = $wpdb->get_results("SELECT `meta_key`, `meta_value` FROM `".$wpdb->usermeta."` WHERE ".((is_numeric($user_id)) ? "`user_id` = '".esc_sql($user_id)."' AND " : '')."(`meta_key` = '".$wpdb->prefix."s2member_file_download_access_log'".(($check_archives_too) ? " OR `meta_key` = '".$wpdb->prefix."s2member_file_download_access_arc'" : '').") AND `meta_value` REGEXP '.*\"file\";s:[0-9]+:\"".esc_sql($file)."\".*'"))) |
| 259 | 259 | { |
| 260 | 260 | foreach($results as $r /* Go through the entire array of results found in the `REGEXP` database query above. */) |
| 261 | - if(is_array($la_entries = maybe_unserialize($r->meta_value)) && !empty($la_entries) /* Unserialize the array. */) | |
| 261 | + if(is_array($la_entries = c_ws_plugin__s2member_utils_arrays::maybe_unserialize($r->meta_value)) && !empty($la_entries)) //260808 Safely unserialize the file download log entries. | |
| 262 | 262 | |
| 263 | 263 | foreach($la_entries as $la_entry /* Go through all of the entries in each result ``$r``; collecting `counter` values. */) |
| 264 | 264 | if(!empty($la_entry['file']) && $la_entry['file'] === $file && (!empty($la_entry['counter']) || ($la_entry['counter'] = 1))) |
| 265 | 265 | { |
| @@ -296,9 +296,9 @@ | ||
| 296 | 296 | { |
| 297 | 297 | if(is_array($results = $wpdb->get_results("SELECT `meta_key`, `meta_value` FROM `".$wpdb->usermeta."` WHERE ".((is_numeric($user_id)) ? "`user_id` = '".esc_sql($user_id)."' AND " : '')."(`meta_key` = '".$wpdb->prefix."s2member_file_download_access_log'".(($check_archives_too) ? " OR `meta_key` = '".$wpdb->prefix."s2member_file_download_access_arc'" : '').") AND `meta_value` REGEXP '.*\"file\";s:[0-9]+:\"".esc_sql($file)."\".*'"))) |
| 298 | 298 | { |
| 299 | 299 | foreach($results as $r /* Go through the entire array of results found in the `REGEXP` database query above. */) |
| 300 | - if(is_array($la_entries = maybe_unserialize($r->meta_value)) && !empty($la_entries) /* Unserialize the array. */) | |
| 300 | + if(is_array($la_entries = c_ws_plugin__s2member_utils_arrays::maybe_unserialize($r->meta_value)) && !empty($la_entries)) //260808 Safely unserialize the file download log entries. | |
| 301 | 301 | |
| 302 | 302 | foreach($la_entries as $la_entry /* Go through all of the entries in each result ``$r``; collecting `counter` values. */) |
| 303 | 303 | if(!empty($la_entry['file']) && $la_entry['file'] === $file && (!empty($la_entry['counter']) || ($la_entry['counter'] = 1))) |
| 304 | 304 | { |
