note 60896 added to function.unserialize
| From: | mina86 at projektcode dot org | Date: | Thu, 19 Jan 2006 18:28:59 +0000 |
| Subject: | note 60896 added to function.unserialize | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-102106@lists.php.net to get a copy of this message | ||
Accualy artistan's function does not work (there should be $serialized_data instead of $text in
function body). Moreover, you must be *very* careful when using eval() as it can be easily used to
do something nasty. Here comes what I've made basing on the two available versions:
<?php
function unserialize_data($str, $objs = true) {
if ($objs && preg_match_all('/O:\d+:"([a-zA-Z0-9_]+)":/', $str, $arr))
{
$callback = ini_get('unserialize_callback_func');
foreach ($arr[1] as $cls) {
if (!class_exists($cls)) {
call_user_func($callback, $cls);
}
if (!class_exists($cls)) {
eval('class ' . $cls . ' { }');
}
}
}
return unserialize($str);
}
?>
However, better (not tested though) sollution seems to be:
<?php
function declare_empty_class($classname) {
static $callback = null;
if ($callback===null) {
$callback = $classname;
return;
}
if ($callback) {
call_user_func($callback, $classname);
}
if (!class_exists($classname)) {
eval('class ' . $classname . ' { }');
}
}
declare_empty_class(ini_get('unserialize_callback_func'));
ini_set('unserialize_callback_func', 'declare_empty_class');
?>
----
Server IP: 81.223.254.85
Probable Submitter: 217.96.228.130
----
Manual Page -- http://www.php.net/manual/en/function.unserialize.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+60896
Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+60896&report=yes&reason=added+to+the+manual
Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+60896&report=yes&reason=bad+code
Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+60896&report=yes&reason=spam
Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+60896&report=yes&reason=useless
Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+60896&report=yes&reason=non-english
Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+60896&report=yes&reason=already+in+docs
Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+60896&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+60896&report=yes
Search -- http://master.php.net/manage/user-notes.php