https://heapcreate.com/posts/unserialize_without_unserialize/