Bug #62397 [Com]: disable_functions = eval does not work
| From: | reeze dot xia at gmail dot com | Date: | Sat, 23 Jun 2012 07:28:04 +0000 |
| Subject: | Bug #62397 [Com]: disable_functions = eval does not work | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-171463@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=62397&edit=1
ID: 62397
Comment by: reeze dot xia at gmail dot com
Reported by: spamik at yum dot pl
Summary: disable_functions = eval does not work
Status: Open
Type: Bug
Package: *General Issues
PHP Version: 5.3.14
Block user comment: N
Private report: N
New Comment:
eval is not a function but language construct
http://php.net/eval so it cannot be disabled by adding it to
disable_functions
Previous Comments:
------------------------------------------------------------------------
[2012-06-23 00:24:50] spamik at yum dot pl
Description:
------------
disable_functions = eval does not work.
eval is often used to obfucate code by malicious viruses. I see no reason why
blocking access to eval() is not doable.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=62397&edit=1