...洞又称对象注入，可能会导致远程代码执行(RCE) 个人理解漏洞为执行unserialize函数，调用某一类并执行魔术方法(magic method)，之后可以执行类中函数，产生安全问题。
基于106个网页-相关网页
The PHP magic method __autoload function is called whenever a class is referenced that has not yet been included in the source file.
每当引用源代码文件中还不包含的类时，调用 __autoload 函数。
Calling the object reference shown in Listing 9 as a variable automatically calls the __invoke magic method, making the class itself act as a closure.
将清单9中所示的对象引用调用为变量将自动调用__invoke魔术方法，使类本身用作闭包。
应用推荐