Skip to content
Udecode Udecode

Developer Tools

Data Unserializer

Inspect serialized PHP data without instantiating classes. Serialized objects are rejected; scalar and array values are supported.

Data Unserializer is loading…

Safely decode PHP serialized scalar and array values into JSON. Class instantiation is disabled and serialized objects are rejected.

Frequently Asked Questions

Is PHP unserialize safe? +

Untrusted serialized input can be dangerous if object instantiation is allowed. This tool disables class instantiation and rejects objects.

Which values are supported? +

Scalar values and arrays that can be represented as JSON are supported. Serialized objects are not.

Can every PHP value be converted to JSON? +

No. Some PHP-specific values do not have a direct JSON representation and are intentionally not supported.

Explore more from Udecode

Explore more online tools and services from Udecode.