A quick note about serialize/unserialze...
You might have to do some sort of processing on the string you pull from the database- I know that I've run into some difficulties because I forgot to stripslashes() on the string.
Good luck with it!
--Robert