PHP 7引入了Filtered unserialize()函數(shù)，以在對不受信任的數(shù)據(jù)上的對象進(jìn)行反序列化時(shí)提供更好的安全性。
<?php class MyClass1 { public $obj1prop; } class MyClass2 { public $obj2prop; } $obj1=new MyClass1(); $obj1->obj1prop=1; $obj2=new MyClass2(); $obj2->obj2prop=2; $serializedObj1=serialize($obj1); $serializedObj2=serialize($obj2); //default behaviour that accepts all classes //second argument can be ommited. //if allowed_classes is passed as false, unserialize converts all objects into __PHP_Incomplete_Class object $data=unserialize($serializedObj1 , ["allowed_classes" => true]); //converts all objects into __PHP_Incomplete_Class object except those of MyClass1 and MyClass2 $data2=unserialize($serializedObj2 , ["allowed_classes" => ["MyClass1", "MyClass2"]]); print($data->obj1prop); print("<br/>"); print($data2->obj2prop); ?>
它產(chǎn)生以下瀏覽器輸出-文章來源：http://www.zghlxwxcb.cn/news/detail-683864.html
1 2
PHP - Filtered反序列化 - 無涯教程網(wǎng)無涯教程網(wǎng)提供PHP 7引入了Filtered unserialize() 函數(shù)，以在對不受信任的數(shù)據(jù)上的對象進(jìn)行反序列化...https://www.learnfk.com/php7+/php7-filtered-unserialize.html文章來源地址http://www.zghlxwxcb.cn/news/detail-683864.html
到了這里，關(guān)于無涯教程-PHP - Filtered反序列化的文章就介紹完了。如果您還想了解更多內(nèi)容，請?jiān)谟疑辖撬阉鱐OY模板網(wǎng)以前的文章或繼續(xù)瀏覽下面的相關(guān)文章，希望大家以后多多支持TOY模板網(wǎng)！
