PHP Unserializer

PHP Unserializer reads values written by PHP serialize(), such as WordPress options and transients, sessions, cache entries and queue payloads, and shows them as a tree, JSON, print_r or var_dump. It is a parser, not a PHP runtime: nothing is executed, no class is instantiated and no magic method such as __wakeup or __unserialize runs, so it is safe for untrusted data.

1. 1.Paste a serialized value or choose Load Example.
2. 2.Input up to 256 KB is parsed as you type; larger input waits for Unserialize.
3. 3.Browse the Tree, or switch to JSON, print_r or var_dump.
4. 4.Select a reference to jump to the value it points to.
5. 5.Copy or download the current output.

String lengths are UTF-8 byte lengths, so s:4:"😀"; is valid and a length broken by a charset conversion is reported with its byte offset. Values are numbered in serialization order starting at 1; r:n; and R:n; point to those numbers and are shown as links instead of copies, so circular structures stay finite, and print_r and var_dump print *RECURSION* like PHP. Protected and private property names are decoded from their NUL-marked form.

Input is limited to 5 MB, 512 nesting levels and 200,000 values, and the tree shows the first 2,000 rows. C: custom serialized payloads are shown as raw text. JSON cannot represent every PHP value, so the JSON view follows the conventions described next to it. Processing happens in your browser; input up to 256 KB is saved locally and Clear removes it.