PHP Serialize & Unserialize

Read and write PHP's serialize() format. Arrays, objects, enums and back references all come through: a class keeps its name as $class , and a private or protected property keeps its visibility instead of showing the NUL bytes PHP writes around it. String lengths are counted in bytes, which is where hand-edited payloads usually break.