note 110180 added to functions.variable-functions
| From: | bogus at example dot com | Date: | Thu, 27 Sep 2012 09:49:51 +0000 |
| Subject: | note 110180 added to functions.variable-functions | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-191041@lists.php.net to get a copy of this message | ||
This feature of php is a god-send for code obfuscators, and in use by people hiding backdoors in
sites. It makes it very difficult to search for inserted code, allowing that there may be no php
function names visible in the code at all.
I'd like to see a way to disallow use of this feature, and/or a way to make it produce a
warning when used, so that its use may be audited.
Example code deliberately not provided.
----
Server IP: 69.147.83.199
Probable Submitter: 122.149.105.1
----
Manual Page -- http://www.php.net/manual/en/functions.variable-functions.php
Edit -- https://master.php.net/note/edit/110180
Del: integrated -- https://master.php.net/note/delete/110180/integrated
Del: useless -- https://master.php.net/note/delete/110180/useless
Del: bad code -- https://master.php.net/note/delete/110180/bad+code
Del: spam -- https://master.php.net/note/delete/110180/spam
Del: non-english -- https://master.php.net/note/delete/110180/non-english
Del: in docs -- https://master.php.net/note/delete/110180/in+docs
Del: other reasons-- https://master.php.net/note/delete/110180
Reject -- https://master.php.net/note/reject/110180
Search -- https://master.php.net/manage/user-notes.php