[PEPr] Comment on RFC::EvalForbiddance

From: Date: Tue, 16 Aug 2005 14:18:01 +0000
Subject: [PEPr] Comment on RFC::EvalForbiddance
References: 1  Groups: php.pear.dev 
Request: Send a blank email to pear-dev+get-39413@lists.php.net to get a copy of this message
Alexey Borzov (http://pear.php.net/user/avb) has commented on the proposal for RFC::EvalForbiddance. Comment: Of the several packages I maintain two make extensive use of eval() / preg_replace('/.../e'). So I am -1 to forbidding the eval() usage. While I do understand that in morons' packages eval() may create a huge security threat, review done by a bigger group of morons will not eliminate the threat (the people who actually got the clue usually don't have time to review). So I am -1 to the review stuff as well. Proposal information: http://pear.php.net/pepr/pepr-proposal-show.php?id=288 -- Sent by PEPr, the automatic proposal system at http://pear.php.net

« previous php.pear.dev (#39413) next »