[PEPr] Comment on RFC::EvalForbiddance
| From: | Martin Jansen | Date: | Tue, 16 Aug 2005 13:39:05 +0000 |
| Subject: | [PEPr] Comment on RFC::EvalForbiddance | ||
| References: | 1 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-39408@lists.php.net to get a copy of this message | ||
Martin Jansen (http://pear.php.net/user/mj) has commented on the proposal for RFC::EvalForbiddance.
Comment:
Scott,
I believe this in fact is necessary. If all packages undergo serious peer
reviews already, then why didn't we spot the issue in XML_RPC until Stefan
pointed us to it?
Don't get me wrong -- I'm certainly not considering to ban more functions,
but I believe that eval() is probably the best way to shoot yourself in the
foot with PHP these days.
Proposal information:
http://pear.php.net/pepr/pepr-proposal-show.php?id=288
--
Sent by PEPr, the automatic proposal system at http://pear.php.net