session_decode()

(PHP 4, PHP 5, PHP 7)

解码会话数据

说明

session_decode()对$data参数中的已经序列化的会话数据进行解码，并且使用解码后的数据填充$_SESSION 超级全局变量。

请注意，这里的反序列化方法不同于unserialize()函数。序列化方法是 PHP 内置的，并且可以通过session.serialize_handler配置项进行修改。

参数

编码后的数据

返回值

成功时返回TRUE，或者在失败时返回FALSE。

参见

• session_encode() 将当前会话数据编码为一个字符串
• session.serialize_handler

I noticed that the posted solutions for manually decoding sessions are not perfect, so I've contributed a more robust solution.
The preg_match solution can never work. It's not so hard to find a case that might break unserialization.
In the case of jason-joeymail is breaks on:

Below you can find my solution. It doesn't use a regular expression but rather the reversibility of the serialize operation and the 'feature' that serialize ignores all further input when it thinks it's done. It's by no means a beautiful or particularly fast solution but it is a more robust solution.
I've added a deserializer for "php" and "php_binary". It should be trivial to add one for "wddx".

Usage: 

Becarful using this if you are trying to switch out of an existing session rather than load one into a clean slate.
session_decode doesn't destroy the existing session data, it will over write it if there is a session variable of the same name, but if the names don't clash the existing session variables will hang around.
I have yet to find a better solution than
session_destroy()
session_start()
session_decode(....);
-----------------------------------------
To explain what I'm talking about

鹏仔微信 15129739599 鹏仔QQ344225443 鹏仔前端 pjxi.com 共享博客 sharedbk.com