Class: PHON

Supplied by:

Name: Martin Alterisio <e-mail contact> Published packages: 5 Country: Argentina - PHP jobs in Argentina Home page: http://mundogris.wordpress.com/ Age: 25 All time rank: 792 Week rank: 258

Browse this author's classes

Innovation Award:

April 2008 Number 3

Serializing a variable value is a way to convert any type of variable into a single string that can be stored in a file, a database or sent to another application or another server, in a way that the original variable value can be easily restored. One easy way convert the value of any variable into a single human-readable string is to use the PHP var_export function. To unserialize a value serialized this way, PHP applications only need to use the eval function. However, applications must be careful when using the eval function to unserialize values received from untrusted sources. The problem is that serialized values may contain arbitrary PHP code that may allow security abuses that is executed when eval is called. This class provides a secure solution to unserialized values serialized with var_export. It uses the PHP tokenizer extension to evaluate the serialized value. This way any kind of disallowed type of expression is detected by the class. Manuel Lemos

Groups:

	PHP 5	Classes using PHP 5 specific features	View top rated classes
	Data types	Modeling and manipulating data types	View top rated classes
	Security	Security protection and attack detection	View top rated classes

Detailed description:

User ratings:

Applications that use this class:

If you know an application of this package, send a message to the author to add a link here.

Files:

File	Role	Description
phon
phon.lib.php	Aux.	Main include file for the PHON package.
InvalidPHON.php	Class	File for the InvalidPHON Exception.
PHONEvaluator.php	Class	File for the PHONEvaluator class
PHONValidator.php	Class	File the for PHONValidator class
SecurePHONClass.php	Class	The file for SecurePHONClass interface
consumer.php	Example	Consumer example
provider.php	Example	Provider example