Joomla CMS
3.10.11 (avec JPlatform 13.1 inclus)
Documentation des API du CMS Joomla en version 3.10.11 et du framework Joomla Platform intégré
|
Fonctions membres publiques | |
__construct ($serialized, array $allowedClasses) | |
getSubstitutedSerialized () | |
Champs de données | |
const | PATTERN_STRING = '#s:(\d+):(")#' |
const | PATTERN_OBJECT = '#(^|;)O:\d+:"([^"]*)":(\d+):\{#' |
Fonctions membres privées | |
buildIgnoreItems () | |
substituteObjects () | |
replace ($replacement, $start, $end) | |
ignore ($start, $end) | |
shift ($offset, $size) | |
sanitizeItem ($className, $leftBorder, $objectSize) | |
Attributs privés | |
$serialized | |
$allowedClasses | |
$ignoreItems = array() | |
Worker implementation for identifying and skipping false-positives not to be substituted - like nested serializations in string literals.
__construct | ( | $serialized, | |
array | $allowedClasses | ||
) |
string | $serialized | |
string[] | $allowedClasses |
Références DisallowedClassesSubstitutor\$allowedClasses, DisallowedClassesSubstitutor\$serialized, DisallowedClassesSubstitutor\buildIgnoreItems(), et DisallowedClassesSubstitutor\substituteObjects().
|
private |
Identifies items to be ignored - like nested serializations in string literals.
Références $offset, $start, et DisallowedClassesSubstitutor\ignore().
Référencé par DisallowedClassesSubstitutor\__construct().
getSubstitutedSerialized | ( | ) |
Références DisallowedClassesSubstitutor\$serialized.
|
private |
Whether given offset positions should be ignored.
int | $start | |
int | $end |
Références $start.
Référencé par DisallowedClassesSubstitutor\buildIgnoreItems(), et DisallowedClassesSubstitutor\substituteObjects().
|
private |
Replaces sanitized object class names in serialized data.
string | $replacement | Sanitized object data |
int | $start | Start offset in serialized data |
int | $end | End offset in serialized data |
Références $start.
Référencé par DisallowedClassesSubstitutor\substituteObjects().
|
private |
Sanitizes object class item.
string | $className | |
int | $leftBorder | |
int | $objectSize |
Références $className.
Référencé par DisallowedClassesSubstitutor\substituteObjects().
|
private |
Shifts offset positions of ignore items by $size
. This is necessary whenever object class names have been substituted which have a different length than before.
int | $offset | |
int | $size |
Références $offset.
Référencé par DisallowedClassesSubstitutor\substituteObjects().
|
private |
Substitutes disallowed object class names and respects items to be ignored.
Références $className, $offset, $start, DisallowedClassesSubstitutor\ignore(), DisallowedClassesSubstitutor\replace(), DisallowedClassesSubstitutor\sanitizeItem(), et DisallowedClassesSubstitutor\shift().
Référencé par DisallowedClassesSubstitutor\__construct().
|
private |
Référencé par DisallowedClassesSubstitutor\__construct().
|
private |
|
private |
const PATTERN_OBJECT = '#(^|;)O:\d+:"([^"]*)":(\d+):\{#' |
const PATTERN_STRING = '#s:(\d+):(")#' |