Fixed issue #8589: PHP object injection in surveys