Understanding PHP Deserialization Vulnerabilities and Preventing Remote Code Execution
A single line, unserialize($_GET[‘data’]), has handed attackers full control of more servers than most developers would like to admit. It looks
prevent RCE attacks