note 73676 deleted from function.unserialize by nlopess
| From: | nlopess@php.net | Date: | Tue, 06 Mar 2007 17:22:44 +0000 |
| Subject: | note 73676 deleted from function.unserialize by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-124164@lists.php.net to get a copy of this message | ||
Note Submitter: hkmaly at matfyz dot cz
----
Better never unserialize user-suplied data, at least in php 4.4.4 and lower. See http://www.php-security.org/MOPB/MOPB-04-2007.html