我们有一个错误处理程序抛出错误:__PHP_Incomplete_Class无法转换为字符串.
错误处理程序当前执行'is_object'测试,对于'Incomplete'对象来说奇怪地是假的.我正在尝试调整错误处理程序,但是我无法解析原始类名,而无需解析重新序列化的版本.
<?php
$o = 'O:14:"BogusTestClass":0:{}';
$c = unserialize($o);
var_dump(
array(
'subject' => $c,
'is_object' => is_object($c), // false !?!?
'get_class' => get_class($c), // __PHP_Incomplete_Class
'gettype' => gettype($c), // 'object'
'Is instance of?' => $c instanceof __PHP_Incomplete_Class, // true
'serial' => serialize($c),
)
);
// Tried:
var_dump($c->__PHP_Incomplete_Class_Name);
// Error:
// The script tried to execute a method or access a property of
// an incomplete object
$refObj = new ReflectionObject($c);
$refProp = $refObj->getProperty('__PHP_Incomplete_Class_Name');
$refProp->setAccessible(true);
var_dump($refProp->getValue($c));
// Error:
// ReflectionProperty::getValue(): The script tried to execute a
// method or access a property of an incomplete object.
// This works, but is fragile, since it depends on internal behavior
// of serialize
function getBadClassName($subject)
{
$serial = serialize($subject);
$parts = explode(':', $serial, 4);
if ('O' === $parts[0] && strlen($parts[2]) -2 == $parts[1]) {
return substr($parts[2], 1, -1);
}
return '-- Error --';
}
var_dump(getBadClassName($c));
Run Code Online (Sandbox Code Playgroud)
尝试从不完整的对象中获取序列化类的名称,以便在错误消息中使用.
避免解析字符串,因为我猜测当使用重新定义序列化/非序列化的扩展时,字符串解析会崩溃,例如http://pecl.php.net/package/igbinary或http://pecl.php.net /package/APC/3.1.7 apc.serializer hook.
根据建议来看待
强制访问__PHP_Incomplete_Class对象属性
可以通过foreach和ArrayObject访问该属性
<?php
$array = new \ArrayObject($object);
var_dump($array['__PHP_Incomplete_Class_Name']);
Run Code Online (Sandbox Code Playgroud)