SQLite database restore fails in Backup Manager with `Evolution CMS Parse Error` on serialized settings values

[another-brick-in-the-wall]

Description:

After restoring a backup in Evolution CMS with the SQLite driver, the manager throws:

Evolution CMS Parse Error
SQLSTATE[HY000]: General error: 1 unrecognized token ...

The error occurs during backup restore in the Backup Manager and appears to be caused by the SQL importer splitting the dump into statements incorrectly. A serialized value in osns_system_settings.sys_files_checksum contains semicolons and quoted strings, which breaks the parser and truncates the SQL statement.

Steps to Reproduce:

1. Use Evolution CMS with SQLite.
2. Create a database backup from the manager (Tools > Backup)
3. Restore the backup through Backup Manager.
4. The restore fails with an SQL parse error.

Expected Behavior:

The backup should restore successfully without SQL parsing errors.

Actual Behavior:

Restore fails with:

SQLSTATE[HY000]: General error: 1 unrecognized token

The failing SQL usually points to the sys_files_checksum setting, which contains serialized data.

Environment:

• Evolution CMS 3.5.6
• SQLite database
• PHP 8.4
• Windows / OSPanel
• Backup Manager restore flow

Additional Notes:

The issue seems specific to SQLite restore logic. The SQL dump itself is valid, but the current importer splits statements in a way that breaks serialized values containing ; and embedded quotes.

Possible Fix:

For SQLite restores, execute the full dump as one SQL script instead of splitting it into individual statements.

[another-brick-in-the-wall]

yet another error output, 3.5.x-dev
« Evolution CMS Parse Error » SQLSTATE[HY000]: General error: 1 unrecognized token: "'a:4:{s:36:"D:/OSPanel/domains/******.loc/index.php"" (Connection: default, Database: D:\OSPanel\domains\******.loc\core\database\db.sqlite, SQL: -- -- Dumping data for table azg5_system_settings -- INSERT INTO "azg5_system_settings" VALUES ('settings_version','3.5.7'), ('server_offset_time','0'), ('modx_charset','UTF-8'), ('site_name','My Evolution Site'), ('site_start','1'), ('error_page','1'), ('unauthorized_page','1'), ('site_status','1'), ('default_template','1'), ('old_template','0'), ('publish_default','1'), ('friendly_urls','1'), ('friendly_alias_urls','1'), ('use_alias_path','1'), ('cache_type','2'), ('failed_login_attempts','3'), ('blocked_minutes','60'), ('use_captcha','0'), ('use_editor','1'), ('use_browser','1'), ('fck_editor_toolbar','standard'), ('fck_editor_autolang','0'), ('editor_css_path',''), ('editor_css_selectors',''), ('upload_maxsize','10485760'), ('manager_layout','4'), ('auto_menuindex','1'), ('session.cookie.lifetime','604800'), ('manager_direction','ltr'), ('xhtml_urls','0'), ('automatic_alias','1'), ('datetime_format','dd-mm-YYYY'), ('warning_visibility','0'), ('remember_last_tab','1'), ('enable_bindings','1'), ('seostrict','1'), ('number_of_results','30'), ('theme_refresher',''), ('show_picker','0'), ('show_newresource_btn','0'), ('show_fullscreen_btn','0'), ('email_sender_method','1'), ('smtp_autotls','0'), ('manager_language','uk'), ('auto_template_logic','sibling'), ('emailsender','myemail@gmail.com'), ('fe_editor_lang','uk'), ('site_id','6a0b5c06ee7cf'), ('manager_theme','default'), ('a','30'), ('stay','2'), ('ControllerNamespace',''), ('UpgradeRepository',''), ('site_unavailable_page',''), ('reload_site_unavailable',''), ('siteunavailable_message_default','uk'), ('site_unavailable_message','В даний час сайт недоступний.'), ('chunk_processor','DLTemplate'), ('cache_default','1'), ('search_default','1'), ('custom_contenttype','text/html,application/rss+xml,application/pdf,application/vnd.ms-word,application/vnd.ms-excel,text/css,text/xml,text/javascript,text/plain,application/json'), ('docid_incrmnt_method','0'), ('enable_cache','1'), ('disable_chunk_cache','0'), ('disable_snippet_cache','0'), ('disable_plugins_cache','0'), ('html_comment',''), ('minifyphp_incache','0'), ('server_protocol','http'), ('rss_url_news','https://feeds.feedburner.com/evocms-release-news'), ('track_visitors','0'), ('friendly_url_prefix',''), ('friendly_url_suffix','/'), ('make_folders','0'), ('full_aliaslisting','0'), ('aliaslistingfolder','0'), ('allow_duplicate_alias','0'), ('manager_theme_mode','3'), ('login_logo',''), ('login_bg',''), ('login_form_position','left'), ('login_form_style','dark'), ('manager_menu_position','top'), ('tree_page_click','27'), ('use_breadcrumbs','0'), ('global_tabs','1'), ('group_tvs','0'), ('resource_tree_node_name','pagetitle'), ('session_timeout','15'), ('tree_show_protected','0'), ('datepicker_offset','-10'), ('number_of_logs','100'), ('which_editor','none'), ('use_udperms','1'), ('udperms_allowroot','0'), ('allow_eval','with_scan'), ('safe_functions_at_eval','time,date,strtotime,strftime'), ('check_files_onlogin','index.php .htaccess manager/index.php /core/config/database/connections/default.php'), ('validate_referer','1'), ('rss_url_security','https://feeds.feedburner.com/evocms-security-news'), ('error_reporting','1'), ('send_errormail','0'), ('reload_captcha_words',''), ('captcha_words','EVO,Access,Better,BitCode,Chunk,Cache,Desc,Design,Excell,Enjoy,URLs,TechView,Gerald,Griff,Humphrey,Holiday,Intel,Integration,Joystick,Join(),Oscope,Genetic,Light,Likeness,Marit,Maaike,Niche,Netherlands,Ordinance,Oscillo,Parser,Phusion,Query,Question,Regalia,Righteous,Snippet,Sentinel,Template,Thespian,Unity,Enterprise,Verily,Tattoo,Veri,Website,WideWeb,Yap,Yellow,Zebra,Zygote'), ('captcha_words_default','EVO,Access,Better,BitCode,Chunk,Cache,Desc,Design,Excell,Enjoy,URLs,TechView,Gerald,Griff,Humphrey,Holiday,Intel,Integration,Joystick,Join(),Oscope,Genetic,Light,Likeness,Marit,Maaike,Niche,Netherlands,Ordinance,Oscillo,Parser,Phusion,Query,Question,Regalia,Righteous,Snippet,Sentinel,Template,Thespian,Unity,Enterprise,Verily,Tattoo,Veri,Website,WideWeb,Yap,Yellow,Zebra,Zygote'), ('filemanager_path','[(base_path)]'), ('upload_files','bmp,ico,gif,jpeg,jpg,png,psd,tif,tiff,fla,flv,swf,aac,au,avi,css,cache,doc,docx,gz,gzip,htaccess,htm,html,js,mp3,mp4,mpeg,mpg,ods,odp,odt,pdf,ppt,pptx,rar,tar,tgz,txt,wav,wmv,xls,xlsx,xml,z,zip,JPG,JPEG,PNG,GIF,svg,tpl,webp,avif'), ('upload_images','bmp,ico,gif,jpeg,jpg,png,psd,tif,tiff,svg,webp,avif'), ('upload_media','au,avi,mp3,mp4,mpeg,mpg,wav,wmv'), ('new_file_permissions','0644'), ('new_folder_permissions','0755'), ('which_browser','mcpuk'), ('rb_webuser','0'), ('rb_base_dir','[(base_path)]assets/'), ('rb_base_url','assets/'), ('clean_uploaded_filename','1'), ('strip_image_paths','1'), ('maxImageWidth','2600'), ('maxImageHeight','2200'), ('clientResize','0'), ('noThumbnailsRecreation','0'), ('thumbWidth','150'), ('thumbHeight','150'), ('thumbsDir','.thumbs'), ('jpegQuality','90'), ('denyZipDownload','0'), ('denyExtensionRename','0'), ('showHiddenFiles','0'), ('email_method','mail'), ('smtp_auth','0'), ('smtp_secure','none'), ('smtp_host','smtp.example.com'), ('smtp_port','25'), ('smtp_username','emailsender'), ('reload_emailsubject',''), ('emailsubject_default','Дані для авторизації'), ('emailsubject','Дані для авторизації'), ('reload_websignupemail_message',''), ('system_email_websignup_default','Доброго дня, [+uid+]! Ваші дані для авторизації на [+sname+]: Ім\''я користувача: [+uid+] Пароль: [+pwd+] Після успішної авторизації на [+sname+] ([+surl+]), ви зможете змінити свій пароль. З повагою, Адміністрація'), ('websignupemail_message','Доброго дня, [+uid+]! Ваші дані для авторизації на [+sname+]: Ім''я користувача: [+uid+] Пароль: [+pwd+] Після успішної авторизації на [+sname+] ([+surl+]), ви зможете змінити свій пароль. З повагою, Адміністрація'), ('reload_system_email_webreminder_message',''), ('system_email_webreminder_default','Доброго дня, [+uid+]! Щоб активувати ваш новий пароль, перейдіть за наступним посиланням: [+surl+] Пізніше ви зможете використовувати наступний пароль для авторизації: [+pwd+] Якщо цей лист прийшло до вас помилково, будь ласка, ігноруйте його. З повагою, Адміністрація'), ('webpwdreminder_message','Доброго дня, [+uid+]! Щоб активувати ваш новий пароль, перейдіть за наступним посиланням: [+surl+] Пізніше ви зможете використовувати наступний пароль для авторизації: [+pwd+] Якщо цей лист прийшло до вас помилково, будь ласка, ігноруйте його. З повагою, Адміністрація'), ('allow_multiple_emails','0'), ('lang_code','uk'), ('sys_files_checksum','a:4:{s:36:"D:/OSPanel/domains/*****.loc/index.php")

[MiddleSokilAI]

Implemented in PR #2350: #2350

Repro

SQLite Backup Manager restore can fail when a dump contains serialized sys_files_checksum values with semicolons and quoted Windows paths. The restore path could split the dump before SQLite received a complete statement, producing SQLSTATE[HY000]: General error: 1 unrecognized token around the serialized value.

Root Cause

SQLite restore used the generic split-and-run import path. That is fragile for SQLite dump scripts because serialized settings values and large file restores can contain delimiter-like content that should remain part of one SQL script.

Validation

• php -l core/functions/actions/bkmanager.php
• php -l core/tests/Unit/BackupManagerSqlImportSplitTest.php
• git diff --check
• Local SQLite smoke: executed a full PDO sqlite::memory: dump containing serialized sys_files_checksum data with semicolons, then verified the following table was created.
• Targeted Pest command was attempted but could not run locally because core/vendor/bin/pest is unavailable in this checkout.

Visual proof is included inline in the PR body:
https://github.com/MiddleSokilAI/evolution/releases/download/proof-assets-2349/sqlite-restore-proof-2349.png

Risk

Low and scoped to Backup Manager restore. SQLite now runs restore dumps as one script through PDO, while non-SQLite imports keep the existing statement-splitting behavior.