note 117865 added to function.eval

From: Date: Sat, 22 Aug 2015 15:38:36 +0000
Subject: note 117865 added to function.eval
Groups: php.notes 
Request: Send a blank email to php-notes+get-203416@lists.php.net to get a copy of this message
With eval enabled , attacker can easily take the control using rfi and base64_decode. For a production website , within php.ini you must add it to disable_function list. Also it takes extra system calls affecting the performance. ---- Server IP: 72.52.91.14 Probable Submitter: 103.46.201.248 ---- Manual Page -- http://php.net/manual/en/function.eval.php Edit -- https://master.php.net/note/edit/117865 Del: integrated -- https://master.php.net/note/delete/117865/integrated Del: useless -- https://master.php.net/note/delete/117865/useless Del: bad code -- https://master.php.net/note/delete/117865/bad+code Del: spam -- https://master.php.net/note/delete/117865/spam Del: non-english -- https://master.php.net/note/delete/117865/non-english Del: in docs -- https://master.php.net/note/delete/117865/in+docs Del: other reasons-- https://master.php.net/note/delete/117865 Reject -- https://master.php.net/note/reject/117865 Search -- https://master.php.net/manage/user-notes.php

« previous php.notes (#203416) next »