serializer = $serializer ?: ObjectManager::getInstance()->get(Serialize::class); } /** * @param string $string * @return bool|mixed */ public function unserialize($string) { if (preg_match('/[oc]:[+\-]?\d+:"/i', $string)) { trigger_error('String contains serialized object'); return false; } return $this->serializer->unserialize($string); } }