note 93237 deleted from function.eval by danbrown
| From: | danbrown@php.net | Date: | Sun, 30 Aug 2009 18:56:49 +0000 |
| Subject: | note 93237 deleted from function.eval by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-160058@lists.php.net to get a copy of this message | ||
Note Submitter: mydanielsmile+php at gmail dot com
----
About maurcie's comment:
Adding a space to a function can bypass it, its not safe to use.
For example, do safe_eval("unlink ('test');") and it will pass.
If anyone wishes to make sure eval is safe he can only do it using tokens...