note 102698 deleted from function.eval by googleguy

Note Submitter: Mark Simon ---- I have looked for a simple way of forcing PHP to interpolate strings after the event (that is, after they have already been assigned, say from a text file). The following seems to work: <?php $text='$a + $b = $c'; $a=2; $b=3; $c=$a+$b; print eval("return<<<END\n$text\nEND;\n"); ?> I have even tried it with some potentially evil code, but the context seems to preclude interpreting it as anything other than a string. Mark