Re: Is it possible to disable eval()?
| From: | hshh | Date: | Fri, 17 Aug 2007 06:28:36 +0000 |
| Subject: | Re: Is it possible to disable eval()? | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-260942@lists.php.net to get a copy of this message | ||
Thank you. It is already enough for me. It works.
On 8/16/07, Steffen Ebermann <eseh@nognu.de> wrote:
> On Thu, Aug 16, 2007 at 09:50:30PM +0800, hshh wrote:
> > I try to disable eval() function in php script, but failed.
> > In php.ini disable_functions=eval is not work, but other functions.
> > So, is it possible to disable eval()? Thanks.
>
> It don't work because eval() isn't a function.
>
> The Suhosin protection system would let you do so. If an option:
>
> http://www.hardened-php.net/suhosin/configuration.html#suhosin.executor.disable_evalŒá4$‰”Ý̦ ââž
> ɲ
>