note 114911 deleted from function.eval by googleguy

From: Date: Fri, 24 Feb 2017 21:06:37 +0000
Subject: note 114911 deleted from function.eval by googleguy
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-208809@lists.php.net to get a copy of this message
Note Submitter: jg estiot at gmail dot com ---- Eval() is no more dangerous than allowing SQL injection or other security flaws within your scripts. I feel it is unfair to single out eval() as "dangerous" when it is as dangerous as many other features of the PHP language if misused. I am writing a powerful PHP Framework and without eval() I could not implement some of its very best features. With power comes responsibility and it is up to each of us to ensure that no unfiltered user input ever ends up in eval().

« previous php.notes (#208809) next »