Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

AFAIK, the only way this could be an issue with the language is if you use serialize/unserialize, which can be used on classes. It goes without saying that this can be useful in certain contexts - such as file-based caching - but should not be relied upon too heavily.

I cannot remember the last time I came across a php project that did something similar.



CakePHP had an issue with unserialize() at one point. Since then we've wised up about using putting user data into unserialize()




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: