"explode() expects parameter 2 to be string" warning in class-wc-session-handle | WordPress.org

Resolved mameda
(@mameda)

10 years, 2 months ago

Vulnerability scan has been done on my website and I get the following warning in the result.
Is this a WC issue or something wrong with my website?

Woocomerce version: 2.5.5

Error message found: Warning: explode() expects parameter 2 to be string, array given in /home/MyDomain/public_html/wp-content/plugins/woocommerce/includes/class-wc-session-handler.php on line 137

https://wordpress.org/plugins/woocommerce/

Viewing 4 replies - 1 through 4 (of 4 total)

Plugin Contributor Mike Jolley
(@mikejolley)

10 years, 2 months ago

Maybe the scanner was setting cookie values to arrays to try to find exploits. I can add a workaround. See here:

https://github.com/woothemes/woocommerce/commit/874d2e3e0a2d3ab8a7df27739e76e57db3f0505c

Thread Starter mameda
(@mameda)

10 years, 2 months ago

Hi Mike,

Thank you very much for providing the workaround so quickly.

I am sorry to bother you, but my WP and WC knowledge is very limited. Could you please let me know how to use the workaround?

Can I create a file called class-wc-session-handler.php and copy&paste the code you added, then place it in the following folder?
/wp-content/themes/MYTHEME/woocommerce/includes/

Plugin Contributor Mike Jolley
(@mikejolley)

10 years, 2 months ago

You can edit the WooCommerce plugin with my change directly. It will be part of future updates.

Thread Starter mameda
(@mameda)

10 years, 2 months ago

Hi Mike,

Thank you very much for your response. I edited the WooCommerce plugin directly.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘"explode() expects parameter 2 to be string" warning in class-wc-session-handle’ is closed to new replies.

4 replies
2 participants
Last reply from: mameda
Last activity: 10 years, 2 months ago
Status: resolved