My entropy gathering system works by serializing user inputs:
only serialization is done. no unserialization is performed.
someone had said:
your serializing user inputs your database is free lunch.
is that true?
are there any security problems with serializing user inputs?