note 110180 added to functions.variable-functions

From: Date: Thu, 27 Sep 2012 09:49:51 +0000
Subject: note 110180 added to functions.variable-functions
Groups: php.notes 
Request: Send a blank email to php-notes+get-191041@lists.php.net to get a copy of this message
This feature of php is a god-send for code obfuscators, and in use by people hiding backdoors in sites. It makes it very difficult to search for inserted code, allowing that there may be no php function names visible in the code at all. I'd like to see a way to disallow use of this feature, and/or a way to make it produce a warning when used, so that its use may be audited. Example code deliberately not provided. ---- Server IP: 69.147.83.199 Probable Submitter: 122.149.105.1 ---- Manual Page -- http://www.php.net/manual/en/functions.variable-functions.php Edit -- https://master.php.net/note/edit/110180 Del: integrated -- https://master.php.net/note/delete/110180/integrated Del: useless -- https://master.php.net/note/delete/110180/useless Del: bad code -- https://master.php.net/note/delete/110180/bad+code Del: spam -- https://master.php.net/note/delete/110180/spam Del: non-english -- https://master.php.net/note/delete/110180/non-english Del: in docs -- https://master.php.net/note/delete/110180/in+docs Del: other reasons-- https://master.php.net/note/delete/110180 Reject -- https://master.php.net/note/reject/110180 Search -- https://master.php.net/manage/user-notes.php

« previous php.notes (#191041) next »