Passing Serialized objects

Neko_D

How do I pass a serialized object in a hidden field on a form.

Right now I have an object serialized and put in post. But when I send it to the next page it does not seem to be unserializing properly. I say this because I am trying to use the object to fill in the fields, through the value attribute, on the second page.

Any help would be greatly appreciated.

MarkR

You should be able to do this, provided that:
1. All escaping is done correctly in the form
2. The class definition of the object is available at the time that you call unserialize() - in practice this means including the file which contains the class definition first.

If either of these things are not done write, some error or warning will issue. Enable all errors (error_reporting(E_ALL)) and you will see these (provided they are displayed and/or logged).

Mark

Neko_D

MarkR wrote:
You should be able to do this, provided that:
1. All escaping is done correctly in the form
2. The class definition of the object is available at the time that you call unserialize() - in practice this means including the file which contains the class definition first.

If either of these things are not done write, some error or warning will issue. Enable all errors (error_reporting(E_ALL)) and you will see these (provided they are displayed and/or logged).

Mark

The escaping looks like it is all correct. When I echo the object echos all the quotes with an escaped quote, \", in the name instead of a regular one.

NogDog

Sounds like maybe magic_quotes_gpc is on? Perhaps:

require_once "ClassDefinition.php";
$serializedObj = (get_magic_quotes_gpc()) ? stripslashes($_POST['serializedObj']) :
      $_POST['serializedObj'];
$obj = unserialze($serializedObj);

Neko_D

NogDog wrote:

Sounds like maybe magic_quotes_gpc is on? Perhaps:

require_once "ClassDefinition.php";
$serializedObj = (get_magic_quotes_gpc()) ? stripslashes($_POST['serializedObj']) :
      $_POST['serializedObj'];
$obj = unserialze($serializedObj);

Ok I will try that, my only question, is get_magic_quotes_gpc() included with PHP5 or do I have to make sure I have another addon?

NogDog

It's a standard built-in function. See [man]get_magic_quotes_gpc[/man].