note 114911 added to function.eval
| From: | jgestiotatgmaildotcom | Date: | Fri, 25 Apr 2014 03:28:00 +0000 |
| Subject: | note 114911 added to function.eval | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-199327@lists.php.net to get a copy of this message | ||
Eval() is no more dangerous than allowing SQL injection or other security flaws within your scripts.
I feel it is unfair to single out eval() as "dangerous" when it is as dangerous as many
other features of the PHP language if misused.
I am writing a powerful PHP Framework and without eval() I could not implement some of its very best
features.
With power comes responsibility and it is up to each of us to ensure that no unfiltered user input
ever ends up in eval().
----
Server IP: 72.52.91.14
Probable Submitter: 1.123.8.228
----
Manual Page -- http://php.net/manual/en/function.eval.php
Edit -- https://master.php.net/note/edit/114911
Del: integrated -- https://master.php.net/note/delete/114911/integrated
Del: useless -- https://master.php.net/note/delete/114911/useless
Del: bad code -- https://master.php.net/note/delete/114911/bad+code
Del: spam -- https://master.php.net/note/delete/114911/spam
Del: non-english -- https://master.php.net/note/delete/114911/non-english
Del: in docs -- https://master.php.net/note/delete/114911/in+docs
Del: other reasons-- https://master.php.net/note/delete/114911
Reject -- https://master.php.net/note/reject/114911
Search -- https://master.php.net/manage/user-notes.php