PHP7新特性—unserialize()过滤

最新推荐文章于 2024-05-04 00:30:00 发布

wanmei002

最新推荐文章于 2024-05-04 00:30:00 发布

阅读量651

点赞数

分类专栏： PHP PHP7 文章标签： unseralize过滤

PHP 同时被 2 个专栏收录

12 篇文章 0 订阅

订阅专栏

PHP7

8 篇文章 0 订阅

订阅专栏

http://www.runoob.com/php/php-filtered-unserialize.html

class MyClass1
{
    public $obj1prop;
}
class MyClass2
{
    public $obj2prop;
}

$obj1 = new MyClass1();
$obj1->obj1prop = 1;
$obj2 = new MyClass2();
$obj2->obj2prop = 2;

$serializeObj1 = serialize($obj1);
$serializeObj2 = serialize($obj2);

$data = unserialize($serializeObj1, ['allowed_classes'=>['MyClass1','MyClass2']]);
echo $data->obj1prop;     => 1

如果 allowed_classes 里没有MyClass1 到 echo 那就会报错错误如下；
Notice: main(): The script tried to execute a method or access a property of an incomplete object. Please ensure that the class definition “MyClass1” of the object you are trying to operate on was loaded before unserialize() gets called or provide a __autoload() function to load the class definition