interface/modules/zend_modules/library/Zend/Serializer/Adapter/PhpCode.php

   1 <?php
   2 /**
   3  * Zend Framework (http://framework.zend.com/)
   4  *
   5  * @link      http://github.com/zendframework/zf2 for the canonical source repository
   6  * @copyright Copyright (c) 2005-2013 Zend Technologies USA Inc. (http://www.zend.com)
   7  * @license   http://framework.zend.com/license/new-bsd New BSD License
   8  */
   9
  10 namespace Zend\Serializer\Adapter;
  11
  12 use Zend\Serializer\Exception;
  13 use Zend\Stdlib\ErrorHandler;
  14
  15 class PhpCode extends AbstractAdapter
  16 {
  17     /**
  18      * Serialize PHP using var_export
  19      *
  20      * @param  mixed $value
  21      * @return string
  22      */
  23     public function serialize($value)
  24     {
  25         return var_export($value, true);
  26     }
  27
  28     /**
  29      * Deserialize PHP string
  30      *
  31      * Warning: this uses eval(), and should likely be avoided.
  32      *
  33      * @param  string $code
  34      * @return mixed
  35      * @throws Exception\RuntimeException on eval error
  36      */
  37     public function unserialize($code)
  38     {
  39         ErrorHandler::start(E_ALL);
  40         $ret  = null;
  41         // This suppression is due to the fact that the ErrorHandler cannot
  42         // catch syntax errors, and is intentionally left in place.
  43         $eval = @eval('$ret=' . $code . ';');
  44         $err  = ErrorHandler::stop();
  45
  46         if ($eval === false || $err) {
  47
  48             $msg = 'eval failed';
  49
  50             // Error handler doesn't catch syntax errors
  51             if ($eval === false) {
  52                 $lastErr = error_get_last();
  53                 $msg    .= ': ' . $lastErr['message'];
  54             }
  55
  56             throw new Exception\RuntimeException($msg, 0, $err);
  57         }
  58
  59         return $ret;
  60     }
  61 }