Unserialize.php

Go to the documentation of this file.

<?php
namespace Magento\Framework\Unserialize;

use Magento\Framework\App\ObjectManager;
use Magento\Framework\Serialize\Serializer\Serialize;

class Unserialize
{
    private $serializer;

    public function __construct(Serialize $serializer = null)
    {
        $this->serializer = $serializer ?: ObjectManager::getInstance()->get(Serialize::class);
    }

    public function unserialize($string)
    {
        if (preg_match('/[oc]:[+\-]?\d+:"/i', $string)) {
            trigger_error('String contains serialized object');
            return false;
        }
        return $this->serializer->unserialize($string);
    }
}