protection unserialize, code review