Home  >  Article  >  Backend Development  >  Solution to unserialize returning false in php_PHP tutorial

Solution to unserialize returning false in php_PHP tutorial

WBOY
WBOYOriginal
2016-07-13 10:18:37834browse

The solution to unserialize returning false in php

PHP provides serialize (serialization) and unserialize (deserialization) methods.

After using serialize to serialize, use unserialize to deserialize to obtain the original data.

Let’s take a look at the following program example:

1

2

3

4

5

6

7

8

9

10

11

12

13

$arr = array(

'name' => 'fdipzone', 

  'gender' => 'male' 

); 

   

$str = serialize($arr); //序列化 

echo 'serialize str:'.$str."rnrn"; 

   

$content = unserialize($str); // 反序列化 

echo "unserialize str:rn"; 

var_dump($content); 

?>

1 2

3

4

5

1

2

3

4

5

6

7

8

9

serialize str:a:2:{s:4:"name";s:8:"fdipzone";s:6:"gender";s:4:"male";} 

   

unserialize str: 

array(2) { 

 ["name"]=> 

 string(8) "fdipzone" 

 ["gender"]=> 

 string(4) "male" 

}

6 7

8

9

1

2

3

4

$str = 'a:9:{s:4:"time";i:1405306402;s:4:"name";s:6:"新晨";s:5:"url";s:1:"-";s:4:"word";s:1:"-";s:5:"rpage";s:29:"http://www.baidu.com/test.html";s:5:"cpage";s:1:"-";s:2:"ip";s:15:"117.151.180.150";s:7:"ip_city";s:31:"中国北京市 北京市移动";s:4:"miao";s:1:"5";}';

var_dump(unserialize($str)); // bool(false)

?>

10 11 12 13
<🎜>$arr = array( <🎜> <🎜> 'name' => 'fdipzone', <🎜> <🎜> 'gender' => 'male' <🎜> <🎜>); <🎜> <🎜> <🎜> <🎜>$str = serialize($arr); //Serialization <🎜> <🎜>echo 'serialize str:'.$str."rnrn"; <🎜> <🎜> <🎜> <🎜>$content = unserialize($str); // Deserialization <🎜> <🎜>echo "unserialize str:rn"; <🎜> <🎜>var_dump($content); <🎜> <🎜>?>
Output:
1 2 3 4 5 6 7 8 9 serialize str:a:2:{s:4:"name";s:8:"fdipzone";s:6:"gender";s:4:"male";} unserialize str: array(2) { ["name"]=> string(8) "fdipzone" ["gender"]=> string(4) "male" }
But in the following example, deserialization will return false
1 2 3 4 <🎜>$str = 'a:9:{s:4:"time";i:1405306402;s:4:"name";s:6:"Xinchen";s:5:"url";s :1:"-";s:4:"word";s:1:"-";s:5:"rpage";s:29:"http://www.baidu.com/test.html" ;s:5:"cpage";s:1:"-";s:2:"ip";s:15:"117.151.180.150";s:7:"ip_city";s:31:"Beijing, China City Beijing Mobile";s:4:"miao";s:1:"5";}'; <🎜> <🎜>var_dump(unserialize($str)); // bool(false) <🎜> <🎜>?>

Check the serialized string and find that the problem is in two places:

s:5:"url"
s:29:"http://www.baidu.com/test.html"
These two places should be
s:3:"url"
s:30:"http://www.baidu.com/test.html"

The reason for this problem is that the encoding when serializing the data is inconsistent with the encoding when deserializing. For example, the database is latin1 and UTF-8 character lengths are different.
In addition, there may be problems with single and double quotation marks and ascii characters" r also has problems calculating length.

The solution is as follows:

1

1

2

3

4

5

6

7

8

9

10

11

12

13

// utf8 

function mb_unserialize($serial_str) { 

  $serial_str= preg_replace('!s:(d+):"(.*?)";!se', "'s:'.strlen('').':"";'", $serial_str ); 

  $serial_str= str_replace("r", "", $serial_str); 

  return unserialize($serial_str); 

   

// ascii 

function asc_unserialize($serial_str) { 

  $serial_str = preg_replace('!s:(d+):"(.*?)";!se', '"s:".strlen("").":"";"', $serial_str ); 

  $serial_str= str_replace("r", "", $serial_str); 

  return unserialize($serial_str); 

}

2 3

4

5

1

2

3

4

5

6

7

8

9

10

11

12

13

14

echo ''; 

   

// utf8 

function mb_unserialize($serial_str) { 

  $serial_str= preg_replace('!s:(d+):"(.*?)";!se', "'s:'.strlen('').':"";'", $serial_str ); 

  $serial_str= str_replace("r", "", $serial_str); 

  return unserialize($serial_str); 

   

$str = 'a:9:{s:4:"time";i:1405306402;s:4:"name";s:6:"新晨";s:5:"url";s:1:"-";s:4:"word";s:1:"-";s:5:"rpage";s:29:"http://www.baidu.com/test.html";s:5:"cpage";s:1:"-";s:2:"ip";s:15:"117.151.180.150";s:7:"ip_city";s:31:"中国北京市 北京市移动";s:4:"miao";s:1:"5";}'; 

   

var_dump(unserialize($str));  // false 

   

var_dump(mb_unserialize($str)); // 正确

6 7 8 9 10 11 12 13
// utf8 function mb_unserialize($serial_str) { $serial_str= preg_replace('!s:(d+):"(.*?)";!se', "'s:'.strlen('$2').':"$2";'", $serial_str ); $serial_str= str_replace("r", "", $serial_str); return unserialize($serial_str); } // ascii function asc_unserialize($serial_str) { $serial_str = preg_replace('!s:(d+):"(.*?)";!se', '"s:".strlen("$2").":"$2";"', $serial_str ); $serial_str= str_replace("r", "", $serial_str); return unserialize($serial_str); }
Example:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 echo ''; // utf8 function mb_unserialize($serial_str) { $serial_str= preg_replace('!s:(d+):"(.*?)";!se', "'s:'.strlen('$2').':"$2";'", $serial_str ); $serial_str= str_replace("r", "", $serial_str); return unserialize($serial_str); } $str = 'a:9:{s:4:"time";i:1405306402;s:4:"name";s:6:"Xinchen";s:5:"url";s :1:"-";s:4:"word";s:1:"-";s:5:"rpage";s:29:"http://www.baidu.com/test.html" ;s:5:"cpage";s:1:"-";s:2:"ip";s:15:"117.151.180.150";s:7:"ip_city";s:31:"Beijing, China City Beijing Mobile";s:4:"miao";s:1:"5";}'; var_dump(unserialize($str)); // false var_dump(mb_unserialize($str)); // Correct

Using the mb_unserialize method that handles single and double quotes and filters r can successfully deserialize.

Use unserialize:

bool(false)

Use mb_unserialize

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

array(9) { 

 ["time"]=> 

 int(1405306402) 

 ["name"]=> 

 string(6) "新晨" 

 ["url"]=> 

 string(1) "-" 

 ["word"]=> 

 string(1) "-" 

 ["rpage"]=> 

 string(30) "http://www.baidu.com/test.html" 

 ["cpage"]=> 

 string(1) "-" 

 ["ip"]=> 

 string(15) "117.151.180.150" 

 ["ip_city"]=> 

 string(31) "中国北京市 北京市移动" 

 ["miao"]=> 

 string(1) "5" 

}

1 2 3

4

6 7 8 9 10
11 12
13 14 15 16 17 18 19 20
array(9) { ["time"]=> int(1405306402) ["name"]=> string(6) "Xinchen" ["url"]=> string(1) "-" ["word"]=> string(1) "-" ["rpage"]=> string(30) "http://www.baidu.com/test.html" ["cpage"]=> string(1) "-" ["ip"]=> string(15) "117.151.180.150" ["ip_city"]=> string(31) "Beijing, China Beijing Mobile" ["miao"]=> string(1) "5" }
http://www.bkjia.com/PHPjc/882699.htmlwww.bkjia.comtruehttp: //www.bkjia.com/PHPjc/882699.htmlTechArticleThe solution to unserialize returning false in php php provides serialize (serialization) and unserialize (deserialization) methods. After using serialize to serialize, you can use unserialize to deserialize...
Statement:
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn