note 61256 added to function.unserialize

"Moreover, you must be *very* careful when using eval() as it can be easily used to do something nasty." Actually, you should probably be equally careful with unserialize, as using it might result in code from your (or standard PHP) classes being executed when you aren't expecting it. It's clearly harder to exploit, but the possibility is there. Therefore, only unserialize data that you know you generated yourself (either because it's stored where you put it, or because its signed, or has been validated in some other way). ---- Server IP: 85.116.0.130 Probable Submitter: 80.177.208.41 ---- Manual Page -- http://www.php.net/manual/en/function.unserialize.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+61256 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+61256&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+61256&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+61256&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+61256&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+61256&report=yes&reason=non-english Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+61256&report=yes&reason=already+in+docs Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+61256&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+61256&report=yes Search -- http://master.php.net/manage/user-notes.php