- stripslashes: documentation ( source)
- unserialize: documentation ( source)
<?php
class users {
public $username, $status;
public function __wakeup() {
$func_status = $this -> status;
$func_status();
}
};
$s = unserialize( stripslashes( 'O:5:"users":2:{s:6:"status";s:9:"phpinfo()";s:8:"username";s:4:"aaaa";}' ) );
echo $s->username;