Free Online PHP Serialize and Unserialize Tool
Serialize and unserialize PHP values with HubKit's PHP serialization tool. Inspect serialized data stored in WordPress options, session data, or database fields. Convert between PHP's serialize format and readable JSON to debug, edit, and understand serialized PHP data.
How to Use
Paste a PHP serialized string to unserialize it into readable JSON, or paste a JSON value to serialize it into PHP format. The tool handles strings, integers, floats, arrays, and nested structures.
Features
- Unserialize PHP data to readable JSON
- Serialize JSON values to PHP format
- Handle nested arrays and objects
- Safe parsing — no code execution
Frequently Asked Questions
What is PHP serialization?
PHP serialize() converts a value into a storable string representation (e.g., s:5:"hello" for a string, a:2:{...} for an array). It is used by WordPress, Drupal, and many PHP frameworks to store complex data in databases.
Is this tool safe for untrusted serialized data?
Yes. The tool uses a custom parser that reads the serialized format without executing any PHP code. It does not use unserialize() with allowed classes, eliminating object injection risks.
Where is PHP serialized data commonly found?
WordPress stores plugin settings, widget configurations, and transients as serialized PHP in the wp_options table. It is also used in PHP session files, cache stores, and migration data.