Fixed issue #13628: Unable to import responses from archive - fix sec…

…urity (#1056)
LimeSurvey · Apr 24, 2018 · 5f32b43 · 5f32b43
1 parent fe5f9d6
commit 5f32b43
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/application/helpers/admin/import_helper.php b/application/helpers/admin/import_helper.php
@@ -2113,10 +2113,10 @@ function XMLImportResponses($sFullFilePath, $iSurveyID, $aFieldReMap = array())
     $results = [];
     $results['responses'] = 0;
 
-    libxml_disable_entity_loader( false ); // fixing #13628
-
+    libxml_disable_entity_loader( false );
     $oXMLReader = new XMLReader();
     $oXMLReader->open($sFullFilePath);
+    libxml_disable_entity_loader( true );
     $DestinationFields = Yii::app()->db->schema->getTable($survey->responsesTableName)->getColumnNames();
     while ($oXMLReader->read()) {
         if ($oXMLReader->name === 'LimeSurveyDocType' && $oXMLReader->nodeType == XMLReader::ELEMENT) {