note 60896 added to function.unserialize

From: Date: Thu, 19 Jan 2006 18:28:59 +0000
Subject: note 60896 added to function.unserialize
Groups: php.notes 
Request: Send a blank email to php-notes+get-102106@lists.php.net to get a copy of this message
Accualy artistan's function does not work (there should be $serialized_data instead of $text in function body). Moreover, you must be *very* careful when using eval() as it can be easily used to do something nasty. Here comes what I've made basing on the two available versions: <?php function unserialize_data($str, $objs = true) { if ($objs && preg_match_all('/O:\d+:"([a-zA-Z0-9_]+)":/', $str, $arr)) { $callback = ini_get('unserialize_callback_func'); foreach ($arr[1] as $cls) { if (!class_exists($cls)) { call_user_func($callback, $cls); } if (!class_exists($cls)) { eval('class ' . $cls . ' { }'); } } } return unserialize($str); } ?> However, better (not tested though) sollution seems to be: <?php function declare_empty_class($classname) { static $callback = null; if ($callback===null) { $callback = $classname; return; } if ($callback) { call_user_func($callback, $classname); } if (!class_exists($classname)) { eval('class ' . $classname . ' { }'); } } declare_empty_class(ini_get('unserialize_callback_func')); ini_set('unserialize_callback_func', 'declare_empty_class'); ?> ---- Server IP: 81.223.254.85 Probable Submitter: 217.96.228.130 ---- Manual Page -- http://www.php.net/manual/en/function.unserialize.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+60896 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+60896&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+60896&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+60896&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+60896&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+60896&report=yes&reason=non-english Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+60896&report=yes&reason=already+in+docs Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+60896&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+60896&report=yes Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#102106) next »