Re: Is it possible to disable eval()?
| From: | Steffen Ebermann | Date: | Thu, 16 Aug 2007 14:21:08 +0000 |
| Subject: | Re: Is it possible to disable eval()? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-260917@lists.php.net to get a copy of this message | ||
On Thu, Aug 16, 2007 at 09:50:30PM +0800, hshh wrote:
> I try to disable eval() function in php script, but
> failed. In php.ini disable_functions=eval is not work,
> but other functions.
> So, is it possible to disable eval()? Thanks.
It don't work because eval() isn't a function.
The Suhosin protection system would let you do so. If an
option:
http://www.hardened-php.net/suhosin/configuration.html#suhosin.executor.disable_eval