Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:103763
MIME-Version: 1.0
References: <CANA3Det3Cn2LAzcFPmVpP+ApgdtwDYrcnwuys8Gdo6CzRxLqBg@mail.gmail.com>
 <CADyq6sKt8XxXOoqFYTjphBQ7Fgg7SFmZdexaDFq2-AfxX-zURg@mail.gmail.com>
 <CANA3DevZK4F2_Vk3PD8aDdMzS1t=L6x4C7xL88Y1AY8p8A2P2w@mail.gmail.com>
 <CADyq6sL2LyguyXawskdCE9XyQmtTq7vRqN+sZ6eDrrh6Rvdb1g@mail.gmail.com>
 <CANA3DeuYoxbnjm4BsgvmTQnDx2isqbbfHOFTe7R8-DqHmiFU=A@mail.gmail.com>
 <CADyq6s+RoQSGh5=NUDPMwATbqcJcZT9uPkNsrCTUgyMQOu2qeQ@mail.gmail.com> <CANA3DetvqF9HPkp-iK=z0LJ7a0yh7O9aM0R7XxARe=XTBUgrWQ@mail.gmail.com>
In-Reply-To: <CANA3DetvqF9HPkp-iK=z0LJ7a0yh7O9aM0R7XxARe=XTBUgrWQ@mail.gmail.com>
Date: Fri, 18 Jan 2019 02:15:33 +0100
Message-ID: <CADyq6s+i1F_nKquVq6AiSmjPzikdVkrWunroPZW=kigXmmZuBw@mail.gmail.com>
To: Marcos Passos <marcospassos.com@gmail.com>
Cc: internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="00000000000013de5f057fb140fd"
Subject: Re: [PHP-DEV] Unserializes, inheritance and allows_classes
From: ocramius@gmail.com (Marco Pivetta)

--00000000000013de5f057fb140fd
Content-Type: text/plain; charset="UTF-8"

On Fri, Jan 18, 2019 at 2:13 AM Marcos Passos <marcospassos.com@gmail.com>
wrote:

> How would you fix this example, then? Perhaps we should add more examples
>> in the docs.
>>
>
> But it closes for extension preventing the serialization of instances not
> whitelisted. It may work for @internal or package private classes, but not
> for public classes.
>

That is precisely what this is designed for.

A subclass is a different type, with a world of possible broken things in
it: do not consider the subclass to be the same as a parent class: it's a
logical mistake.

Marco Pivetta

http://twitter.com/Ocramius

http://ocramius.github.com/

--00000000000013de5f057fb140fd--