note 75377 added to function.eval
| From: | sean at awesomeplay dot com | Date: | Fri, 25 May 2007 21:27:57 +0000 |
| Subject: | note 75377 added to function.eval | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-126909@lists.php.net to get a copy of this message | ||
kai dot chan, that code is rather unnecessary. Aside from the huge security risk (the same risk
exists for naive JSON implementations, and good ones do not use the eval() construct), PHP already
has a means of safely encoding/decoding arrays: serialize() and unserialize().
Not to mention that PHP now has JSON functions, so you can just the regular JSON format itself.
Still safer that way.
----
Server IP: 69.147.83.197
Probable Submitter: 71.238.87.27
----
Manual Page -- http://www.php.net/manual/en/function.eval.php
Edit -- https://master.php.net/note/edit/75377
Del: integrated -- https://master.php.net/note/delete/75377/integrated
Del: useless -- https://master.php.net/note/delete/75377/useless
Del: bad code -- https://master.php.net/note/delete/75377/bad+code
Del: spam -- https://master.php.net/note/delete/75377/spam
Del: non-english -- https://master.php.net/note/delete/75377/non-english
Del: in docs -- https://master.php.net/note/delete/75377/in+docs
Del: other reasons-- https://master.php.net/note/delete/75377
Reject -- https://master.php.net/note/reject/75377
Search -- https://master.php.net/manage/user-notes.php