<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title>Introduction</title>
</head>
<body><div class="manualnavbar" style="text-align: center;">
<div class="prev" style="text-align: left; float: left;"><a href="book.wddx.html">WDDX</a></div>
<div class="next" style="text-align: right; float: right;"><a href="wddx.setup.html">Installing/Configuring</a></div>
<div class="up"><a href="book.wddx.html">WDDX</a></div>
<div class="home"><a href="index.html">PHP Manual</a></div>
</div><hr /><div id="intro.wddx" class="preface">
<h1 class="title">Introduction</h1>
<p class="para">
These functions are intended for work with <a href="http://www.openwddx.org/" class="link external">» WDDX</a>.
</p>
<div class="warning"><strong class="warning">Warning</strong>
<p class="para">
Do not pass untrusted user input to <span class="function"><a href="function.wddx-deserialize.html" class="function">wddx_deserialize()</a></span>.
Unserialization can result in code being loaded and executed due to object
instantiation and autoloading, and a malicious user may be able to exploit
this. Use a safe, standard data interchange format such as JSON (via
<span class="function"><a href="function.json-decode.html" class="function">json_decode()</a></span> and <span class="function"><a href="function.json-encode.html" class="function">json_encode()</a></span>) if
you need to pass serialized data to the user.
</p>
</div>
</div><hr /><div class="manualnavbar" style="text-align: center;">
<div class="prev" style="text-align: left; float: left;"><a href="book.wddx.html">WDDX</a></div>
<div class="next" style="text-align: right; float: right;"><a href="wddx.setup.html">Installing/Configuring</a></div>
<div class="up"><a href="book.wddx.html">WDDX</a></div>
<div class="home"><a href="index.html">PHP Manual</a></div>
</div></body></html>
