It's a very complex attack routine, and it requires advanced PHP coding knowledge to exploit. Deserialization exploits, in general, are hard to uncover and they're the bane of many programming ...

Joel Gratcyk's son Wesley spends a few hours a week learning to code in Python, PHP, and Swift. Wesley started taking free courses when he was 7 and uses both online and library resources.