Deprecate Worksheet::getHashInt and Spreadsheet::getId

Php8.5 *may* deprecate the use of `__wakeup` (it is planned, but not yet implemented, and it is convtroversial). We use it only twice. In the first instance, it just throws an exception to prevent a security exploit. This can be trivially replaced with `__unserialize`.

The other instance is merely to initialize a Worksheet instance variable. Converting this use to `__unserialize` is *not* trivial (one of the reasons for the controversy). However, I see no useful purpose for that variable. Since it has no use, there is no real need for `__wakeup`, so we will just remove the routine altogether, and deprecate the variable's getter (there is no setter).

A similar instance variable in Spreadsheet also serves no useful purpose, so we will deprecate its getter as well (again no setter).

Author: oleibman

CHANGELOG.md

@@ -25,11 +25,13 @@ and this project adheres to [Semantic Versioning](https://semver.org). Thia is a
 
 ### Deprecated
 
-- Nothing yet.
+- Worksheet::getHashInt serves no useful purpose. No replacement.
+- Spreadsheet::getId serves no useful purpose. No replacement.
 
 ### Fixed
 
 - Php8.5 deprecates use of null as array index. [PR #4634](https://github.com/PHPOffice/PhpSpreadsheet/pull/4634)
+- For Php8.5, replace one of our two uses of `__wakeup` with `__unserialize`, and eliminate the other. [PR #4639](https://github.com/PHPOffice/PhpSpreadsheet/pull/4639)
 
 ## 2025-09-03 - 5.1.0
 

src/PhpSpreadsheet/ReferenceHelper.php

@@ -1045,7 +1045,7 @@ private function updateNamedRange(DefinedName $definedName, Worksheet $worksheet
     {
         $cellAddress = $definedName->getValue();
         $asFormula = ($cellAddress[0] === '=');
-        if ($definedName->getWorksheet() !== null && $definedName->getWorksheet()->getHashInt() === $worksheet->getHashInt()) {
+        if ($definedName->getWorksheet() === $worksheet) {
             /**
              * If we delete the entire range that is referenced by a Named Range, MS Excel sets the value to #REF!
              * PhpSpreadsheet still only does a basic adjustment, so the Named Range will still reference Cells.
@@ -1064,7 +1064,7 @@ private function updateNamedRange(DefinedName $definedName, Worksheet $worksheet
 
     private function updateNamedFormula(DefinedName $definedName, Worksheet $worksheet, string $beforeCellAddress, int $numberOfColumns, int $numberOfRows): void
     {
-        if ($definedName->getWorksheet() !== null && $definedName->getWorksheet()->getHashInt() === $worksheet->getHashInt()) {
+        if ($definedName->getWorksheet() === $worksheet) {
             /**
              * If we delete the entire range that is referenced by a Named Formula, MS Excel sets the value to #REF!
              * PhpSpreadsheet still only does a basic adjustment, so the Named Formula will still reference Cells.

src/PhpSpreadsheet/Shared/XMLWriter.php

@@ -60,7 +60,8 @@ public function __destruct()
         }
     }
 
-    public function __wakeup(): void
+    /** @param mixed[] $data */
+    public function __unserialize(array $data): void
     {
         $this->tempFileName = '';
 

src/PhpSpreadsheet/Spreadsheet.php

@@ -735,9 +735,8 @@ public function getSheetByNameOrThrow(string $worksheetName): Worksheet
      */
     public function getIndex(Worksheet $worksheet, bool $noThrow = false): int
     {
-        $wsHash = $worksheet->getHashInt();
         foreach ($this->workSheetCollection as $key => $value) {
-            if ($value->getHashInt() === $wsHash) {
+            if ($value === $worksheet) {
                 return $key;
             }
         }
@@ -1468,6 +1467,10 @@ public function garbageCollect(): void
 
     /**
      * Return the unique ID value assigned to this spreadsheet workbook.
+     *
+     * @deprecated 5.2.0 Serves no useful purpose. No replacement.
+     *
+     * @codeCoverageIgnore
      */
     public function getID(): string
     {

src/PhpSpreadsheet/Worksheet/BaseDrawing.php

@@ -422,7 +422,7 @@ public function getHashCode(): string
         return md5(
             $this->name
             . $this->description
-            . (($this->worksheet === null) ? '' : (string) $this->worksheet->getHashInt())
+            . (($this->worksheet === null) ? '' : (string) spl_object_id($this->worksheet))
             . $this->coordinates
             . $this->offsetX
             . $this->offsetY

src/PhpSpreadsheet/Worksheet/Worksheet.php

@@ -306,11 +306,6 @@ class Worksheet
      */
     private ?Color $tabColor = null;
 
-    /**
-     * Hash.
-     */
-    private int $hash;
-
     /**
      * CodeName.
      */
@@ -323,7 +318,6 @@ public function __construct(?Spreadsheet $parent = null, string $title = 'Worksh
     {
         // Set parent and title
         $this->parent = $parent;
-        $this->hash = spl_object_id($this);
         $this->setTitle($title, false);
         // setTitle can change $pTitle
         $this->setCodeName($this->getTitle());
@@ -380,11 +374,6 @@ public function __destruct()
         unset($this->rowDimensions, $this->columnDimensions, $this->tableCollection, $this->drawingCollection, $this->chartCollection, $this->autoFilter);
     }
 
-    public function __wakeup(): void
-    {
-        $this->hash = spl_object_id($this);
-    }
-
     /**
      * Return the cell collection.
      */
@@ -3189,7 +3178,7 @@ private function validateNamedRange(string $definedName, bool $returnNullIfInval
 
         if ($namedRange->getLocalOnly()) {
             $worksheet = $namedRange->getWorksheet();
-            if ($worksheet === null || $this->hash !== $worksheet->getHashInt()) {
+            if ($worksheet === null || $this !== $worksheet) {
                 if ($returnNullIfInvalid) {
                     return null;
                 }
@@ -3333,9 +3322,14 @@ public function garbageCollect(): static
         return $this;
     }
 
+    /**
+     * @deprecated 5.2.0 Serves no useful purpose. No replacement.
+     *
+     * @codeCoverageIgnore
+     */
     public function getHashInt(): int
     {
-        return $this->hash;
+        return spl_object_id($this);
     }
 
     /**
@@ -3722,7 +3716,6 @@ public function __clone()
                 }
             }
         }
-        $this->hash = spl_object_id($this);
     }
 
     /**

tests/PhpSpreadsheetTests/Reader/Xml/XmlTest.php

@@ -57,7 +57,6 @@ public function testLoadCorruptedFile(): void
 
         $xmlReader = new Xml();
         $spreadsheet = @$xmlReader->load('tests/data/Reader/Xml/CorruptedXmlFile.xml');
-        self::assertNotSame('', $spreadsheet->getID());
     }
 
     public function testListWorksheetNamesCorruptedFile(): void

tests/PhpSpreadsheetTests/Worksheet/CloneTest.php

@@ -51,7 +51,7 @@ public function testSerialize1(): void
         $newSheet = unserialize($serialized);
         self::assertInstanceOf(Worksheet::class, $newSheet);
         self::assertSame(10, $newSheet->getCell('A1')->getValue());
-        self::assertNotEquals($newSheet->getHashInt(), $sheet1->getHashInt());
+        self::assertNotSame($newSheet, $sheet1);
         self::assertNotNull($newSheet->getParent());
         self::assertNotSame($newSheet->getParent(), $sheet1->getParent());
         $newSheet->getParent()->disconnectWorksheets();
@@ -66,6 +66,6 @@ public function testSerialize2(): void
         $newSheet = unserialize($serialized);
         self::assertInstanceOf(Worksheet::class, $newSheet);
         self::assertSame(10, $newSheet->getCell('A1')->getValue());
-        self::assertNotEquals($newSheet->getHashInt(), $sheet1->getHashInt());
+        self::assertNotSame($newSheet, $sheet1);
     }
 }