Re: [PHP-DEV] unserialize() data from untrusted source

2004-09-05 Thread Harry Fuecks
On Sun, 5 Sep 2004 15:33:28 -0400, Jason Garber <[EMAIL PROTECTED]> wrote: > This is an interesting point you bring up. When we have large > registration processes or similar multi-page forms, we write our > data array to a hidden field using. > > base64_encode(serialize($aData)) > >

[PHP-DEV] unserialize() data from untrusted source

2004-09-05 Thread Harry Fuecks
Hi All, Have a situation where I want to unserialize a string received from an untrusted source over HTTP (a Javascript client in this case). For basic types this is no concern but when it comes to objects, would be nice to be able to restrict the class of object to a member of a known list, to pr

[PHP-DEV] CVS Account Request: hfuecks

2003-10-26 Thread Harry Fuecks
For maintaining existing PEAR packages PEAR::XML_HTMLSax and PEAR::XML_SaxFilters (currently on Sourceforge) plus the shortly to be released PEAR::Calendar package (http://marc.theaimsgroup.com/?t=10668615911&r=1&w=2), so I can collaborate with the other two maintainers who'll be working on