note 87213 deleted from function.eval by danbrown
| From: | danbrown@php.net | Date: | Tue, 25 Nov 2008 16:01:20 +0000 |
| Subject: | note 87213 deleted from function.eval by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-146933@lists.php.net to get a copy of this message | ||
Note Submitter: geek dot de at gmail dot com
----
in response to samme at vimio
and warning for all using
<?php
eval('?'.'>'. $variable .'<'.'?php');
?>
In my version of PHP at least (5.2.5 windows), this just wouldn't work because you have to add
another ' ' (space) after the php opening tag, as such:
<?php
eval('?'.'>'. $variable .'<'.'?php ');
?>
It took me the better part of this afternoon to figure this out. So be warned!
It seems like this is because the next php statement after that is appended resulting in something
like:
? >hello world< ?phpdie('asd');