Download the PHP package academe/serializeparser without Composer
On this page you can find all versions of the php package academe/serializeparser. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download academe/serializeparser
More information about academe/serializeparser
Files in academe/serializeparser
Package serializeparser
Short Description A PHP parser for serialized data, to be able to 'peek' into serialize strings.
License MIT
Homepage https://github.com/academe/SerializeParser
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package serializeparser
SerializeParser
A PHP parser for serialized data, to be able to "peek" into serialized strings.
Purpose
I had a bunch of PHP serialized data in the database, and needed to inspect that data for presenting information to the administrator. There appeared to be no way to interpret this data in PHP without instantiating all the objects that were in that data, and I did not want to do that, and did not have all the classes handy anyway.
There is a setting that will allow you to replace missing classes with another class, but that would still mean instantiating those classes that could be found.
So here we are, a simple parser that takes a serialized data string, and tries
to deserialize it, but replacing all objects with a stdClass so we are not
instantiating classes that have no business being instantiated, or classes that
may not even exist in the application.
How to Use
Here is a simple example:
Note that the StringReader class has been unserialized as stdClass and the original
name moved to attribute __class_name. The protected and private attributes are all
also present and accessible (though the final parsed structure does not show which were
protected or private - maybe a metadata attribute could list those?).
Remember, the purpose of this is not to reconstruct the original data as an accurate representation. It is to allow the data to be inspected and some key values pulled out for logging, showing to the user etc.
TODO
- Maybe make the
Parser::parse()method static. - Make the StringReader a little more efficient. Efficiency was not key in getting this working.
- Inject the string reader so it can be mocked for testing.
Want to Help?
If you fancy writing some tests, have found a bug, or can extend it to handle more cases of serialized data, then please feel free to get involved. PRs, issues, or just email me - whatever you like.
Source Specification
The only source specification for how serialization works, is the PHP source code. However, there are a number of serialized parsers written for langauegs other than PHP that work, and have been derived from that code. I have ported this code from some of those packages.
This is not complete, so will not handle references for example, but does enough of the simple stuff for my needs.
- This has a handy algorithm in Python:
https://github.com/jqr/php-serialize/blob/master/lib/php_serialize.rb#L195 - There is a pretty good descriptino of some of the intricaces here:
http://stackoverflow.com/questions/14297926/structure-of-a-serialized-php-string - My origional SO question that led me to write my own solution:
http://stackoverflow.com/questions/31219158/analyse-parse-a-serialized-php-data-containining-objects/31223873 - This excerpt from the PHP Internals book gives a great breakdown of all of the data types:
http://www.phpinternalsbook.com/classes_objects/serialization.html
