note 61256 deleted from function.unserialize by aharvey

Note Submitter: Jules ---- "Moreover, you must be *very* careful when using eval() as it can be easily used to do something nasty." Actually, you should probably be equally careful with unserialize, as using it might result in code from your (or standard PHP) classes being executed when you aren't expecting it. It's clearly harder to exploit, but the possibility is there. Therefore, only unserialize data that you know you generated yourself (either because it's stored where you put it, or because its signed, or has been validated in some other way).