note 75377 deleted from function.eval by danbrown
| From: | danbrown@php.net | Date: | Sun, 17 May 2009 19:54:10 +0000 |
| Subject: | note 75377 deleted from function.eval by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-155290@lists.php.net to get a copy of this message | ||
Note Submitter: sean at awesomeplay dot com
----
kai dot chan, that code is rather unnecessary. Aside from the huge security risk (the same risk
exists for naive JSON implementations, and good ones do not use the eval() construct), PHP already
has a means of safely encoding/decoding arrays: serialize() and unserialize().
Not to mention that PHP now has JSON functions, so you can just the regular JSON format itself.
Still safer that way.