Bug #62397 [Com]: disable_functions = eval does not work

From: Date: Sat, 23 Jun 2012 10:56:33 +0000
Subject: Bug #62397 [Com]: disable_functions = eval does not work
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-171468@lists.php.net to get a copy of this message 
Edit report at https://bugs.php.net/bug.php?id=62397&edit=1

 ID:                 62397
 Comment by:         anon at anon dot anon
 Reported by:        spamik at yum dot pl
 Summary:            disable_functions = eval does not work
 Status:             Not a bug
 Type:               Bug
 Package:            *General Issues
 PHP Version:        5.3.14
 Block user comment: N
 Private report:     N

 New Comment:

A reason why a bug exists is not a reason why it is not a bug.


Previous Comments:
------------------------------------------------------------------------
[2012-06-23 09:14:58] laruence@php.net

eval is not a function, if you want to disable it, you may refer to Suhosin 
thanks

------------------------------------------------------------------------
[2012-06-23 07:28:04] reeze dot xia at gmail dot com

eval is not a function but language construct
http://php.net/eval so it cannot be disabled by adding it to
disable_functions

------------------------------------------------------------------------
[2012-06-23 00:24:50] spamik at yum dot pl

Description:
------------
disable_functions = eval does not work.

eval is often used to obfucate code by malicious viruses. I see no reason why 
blocking access to eval() is not doable.



------------------------------------------------------------------------



-- 
Edit this bug report at https://bugs.php.net/bug.php?id=62397&edit=1

Thread (22 messages)

« previous php.bugs (#171468) next »