PHP Serialize() & Unserialize() Issues

表单序列化挑战

最新推荐文章于 2025-11-26 14:44:03 发布

原创最新推荐文章于 2025-11-26 14:44:03 发布 · 97 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#php #数据库

Php / Pear / Mysql / Node.js 专栏收录该内容

377 篇文章

订阅专栏

本文探讨了在处理大型表单时使用PHP的serialize和unserialize函数遇到的问题及解决方案。作者发现当表单字段包含特殊字符时，序列化会出现错误。通过使用base64编码解决此问题，确保了数据完整性和易于维护。

I've been working on some very large forms lately and I've come to the conclusion that creating a database scheme around them wouldn't be the best option because:

My customers don't need to analyze all form submissions as a whole -- form information is simply used on a per-submission basis (like a job application, for example).
Making updates to these forms would be very costly since it would take quite a bit of time to add and remove DB fields as well as update the HTML form.
I'd like to revert the information into an array format just like it came in easily.

For that reason, I've been using the serialize() and unserialize() functions often. Serializing an array keeps the information in an array format, so to speak, but in one long string. Anyways, I ran into the following error when testing unserialize on some information that I had serialized:

Notice: unserialize(): Error at offset 2 of 52 bytes in file.php on line 130

It turns out that if there's a ", ', :, or ; in any of the array values the serialization gets corrupted. I've found the following fix for this issue on PHP.net:

//to safely serialize
$safe_string_to_store = base64_encode(serialize($multidimensional_array));

//to unserialize...
$array_restored_from_db = unserialize(base64_decode($encoded_serialized_string));

It's a great fix to simple problem!

来源： http://davidwalsh.name/php-serialize-unserialize-issues