Unserialize.php 1.01 KB
Newer Older
Ketan's avatar
Ketan committed
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44
<?php
/**
 * Copyright © Magento, Inc. All rights reserved.
 * See COPYING.txt for license details.
 */

namespace Magento\Framework\Unserialize;

use Magento\Framework\App\ObjectManager;
use Magento\Framework\Serialize\Serializer\Serialize;

/**
 * @deprecated 101.0.0
 */
class Unserialize
{
    /**
     * Serializer for safe string unserialization.
     *
     * @var Serialize
     */
    private $serializer;

    /**
     * @param Serialize|null $serializer Optional parameter for backward compatibility.
     */
    public function __construct(Serialize $serializer = null)
    {
        $this->serializer = $serializer ?: ObjectManager::getInstance()->get(Serialize::class);
    }

    /**
     * @param string $string
     * @return bool|mixed
     */
    public function unserialize($string)
    {
        if (preg_match('/[oc]:[+\-]?\d+:"/i', $string)) {
            trigger_error('String contains serialized object');
            return false;
        }
        return $this->serializer->unserialize($string);
    }
}