$_POST is always an array. I have control over one of the array values, e.g.
$_POST['evil']. Is the unserialize exploit possible with this kind of structure?
I coulnd't get it to work with a structure like this: