3v4l.org

run code in 300+ PHP versions simultaneously
<?php class CantUnserializeThis extends ArrayObject { } $className = 'CantUnserializeThis'; var_dump(serialize(new ArrayObject())); var_dump(unserialize(sprintf( 'C:%d:"%s":0:{}', strlen($className), $className ))); var_dump(unserialize(sprintf( 'S:%d:"%s":0:{}', strlen($className), $className )));

preferences:
42.72 ms | 402 KiB | 5 Q