Using unserialize function to unserialize data from user input can be dangerous.
A Warning from php.net
Warning Do not pass untrusted user input to unserialize().
Unserialization can result in code being loaded and executed due to
object instantiation and autoloading, and a malicious user may ...