But in code you want to unserialize it so you can access the contents.<BR><BR>On the other hand, I don't know shit about PHP but that is my understanding of serialization in general.

Java unserialize remote code execution hole hits Commons Collections, JBoss, WebSphere, WebLogic A remote code vulnerability residing in the widely used Apache Commons library has put many Java ...