Libraries tagged by object-inspection

Runtime introspection helpers for PHP 8.4+ featuring trait detection, class hierarchy inspection, and reflection utilities

Go to Download

provide PHP Object Injection safe unserialize function

Go to Download

Safely serialize and unserialize plain data objects (PHP native serialize()/unserialize() with an allowed_classes allowlist derived from the class structure) and scalar/null values (JSON), preventing object-injection and POP-chain attacks.

Go to Download

Active malware prevention + on-disk scanner for Magento 2. Three real-time guards (REST API, universal upload, custom-options) block PolyShell webshells, polyglot files and PHP-object-injection payloads BEFORE they touch disk. A nightly recursive scanner finds anything that slipped through, auto-quarantines critical findings inside writable upload zones, and ships with a built-in vendor allowlist that prevents false positives on legitimate composer dependencies. Includes admin grid, in-admin documentation, signature catalog and email notifications.

Go to Download

Static analyzer that flags PHP Object Injection: a call to the bare global unserialize(...) on a value traceable (directly, or via a same-function local-variable assignment) to $_GET/$_POST/$_REQUEST/$_COOKIE/$_SERVER['HTTP_*']/Laravel request()->input()/$request->get()/$request->cookie(), with no ['allowed_classes' => false] (or explicit class allowlist) as the second argument.

Go to Download