News for hackers. Stuff that matters.

JiJadiJade

JiJadiJade on Hacker News

Re:WordPress before 3.6.1: PHP Object Injection on Thursday September 12, 2013 @03:18AM (#6372557)
This is pretty a lengthy read and if I follow it correctly, then the actual problem has not been fixed? So Wordpress is still not able to differ between injected serialized data (which is dangerous as the PHP manual states as well) and that data it serialized on it's own, right?