Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:75637
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.215.43 as permitted sender)
MIME-Version: 1.0
Sender: laruence@gmail.com
In-Reply-To: <53C75A89.5000401@fedoraproject.org>
References: <CABBJUpf4Zrj+MiqGoUPp6NWBBpJzntu0NAyveZyrqx0oNQYpBA@mail.gmail.com>
 <53C75A89.5000401@fedoraproject.org>
Date: Thu, 17 Jul 2014 13:56:33 +0800
Message-ID: <CABBJUpfeDv1juoL=1bkaiY3M9cgLd8f6NMagSqccoQVC+vekCw@mail.gmail.com>
To: Remi Collet <remi@fedoraproject.org>
Cc: PHP Internals <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: [PHP-DEV] An BC issue in unserialize
From: laruence@php.net (Laruence)

On Thu, Jul 17, 2014 at 1:09 PM, Remi Collet <remi@fedoraproject.org> wrote=
:
> Le 17/07/2014 06:01, Laruence a =C3=A9crit :
>
>>             $this->_prototype =3D unserialize(sprintf('O:%d:"%s":0:{}',
>> strlen($this->name), $this->name));
>
>>    I am not sure now.  should this usage be supported?
>
> In think unserialize is an horrible hack which should have never be used.
>
> This is described in UPGRADINGS
>
> First, try to fix the code, using  newInstanceWithoutConstructor() when
> available (5.4+) and possible (userland classes)
>
Hey:
    serialize maybe a sensitive area, in my opinion we should very
careful about the BC issue in such area..

    if a user want to migrate it's codes from 5.5 to 5.6,  but he has
multi servers, he might want to migrate them one by one.

    in such case,  the serialized data could be shared by 5.5 and 5.6...

    so...

thanks
> Remi.
>
>
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>



--=20
Laruence  Xinchen Hui
http://www.laruence.com/