RE: [PHP] XSLT; XML => PHP code
| From: | Darren Gamble | Date: | Thu, 28 Mar 2002 22:23:32 +0000 |
| Subject: | RE: [PHP] XSLT; XML => PHP code | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-90599@lists.php.net to get a copy of this message | ||
Good day,
eval() is a very powerful function. You should be careful that users can't
find some way to execute arbitrary code by providing input that your program
did not expect.
Also, if your string doesn't have the correct syntax, your program will
terminate.
============================
Darren Gamble
Planner, Regional Services
Shaw Cablesystems GP
630 - 3rd Avenue SW
Calgary, Alberta, Canada
T2P 4L4
(403) 781-4948
-----Original Message-----
From: Erik Price [mailto:pricee@hhbrown.com]
Sent: Thursday, March 28, 2002 3:20 PM
To: Darren Gamble
Cc: php-general@lists.php.net
Subject: Re: [PHP] XSLT; XML => PHP code
On Thursday, March 28, 2002, at 04:52 PM, Darren Gamble wrote:
> Good day,
>
> To have PHP evaluate string contents as an expression, use eval().
Thanks for the pointer, I have never used this function before. I'm not
sure what it means by "as with any function that outputs directly to the
browser", since in their example it just shows an evaluation of a simple
variable assignment (which I'm guessing doesn't get output to the
browser). I will have to experiment with this and make sure it works
right.
> The usual disclaimer comes with this function... be careful.
(... of what?)
Thanks again Darren,
Erik
----
Erik Price
Web Developer Temp
Media Lab, H.H. Brown
pricee@hhbrown.com