[PEPr] Comment on RFC::EvalForbiddance
| From: | Alexey Borzov | Date: | Tue, 16 Aug 2005 14:18:01 +0000 |
| Subject: | [PEPr] Comment on RFC::EvalForbiddance | ||
| References: | 1 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-39413@lists.php.net to get a copy of this message | ||
Alexey Borzov (http://pear.php.net/user/avb) has commented on the proposal for RFC::EvalForbiddance.
Comment:
Of the several packages I maintain two make extensive use of eval() /
preg_replace('/.../e'). So I am -1 to forbidding the eval() usage.
While I do understand that in morons' packages eval() may create a huge
security threat, review done by a bigger group of morons will not
eliminate the threat (the people who actually got the clue usually don't
have time to review). So I am -1 to the review stuff as well.
Proposal information:
http://pear.php.net/pepr/pepr-proposal-show.php?id=288
--
Sent by PEPr, the automatic proposal system at http://pear.php.net