Good day,

eval() is a very powerful function.  You should be careful that users can't
find some way to execute arbitrary code by providing input that your program
did not expect.

Also, if your string doesn't have the correct syntax, your program will

Darren Gamble
Planner, Regional Services
Shaw Cablesystems GP
630 - 3rd Avenue SW
Calgary, Alberta, Canada
T2P 4L4
(403) 781-4948

-----Original Message-----
From: Erik Price [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 28, 2002 3:20 PM
To: Darren Gamble
Subject: Re: [PHP] XSLT; XML => PHP code

On Thursday, March 28, 2002, at 04:52  PM, Darren Gamble wrote:

> Good day,
> To have PHP evaluate string contents as an expression, use eval().

Thanks for the pointer, I have never used this function before.  I'm not 
sure what it means by "as with any function that outputs directly to the 
browser", since in their example it just shows an evaluation of a simple 
variable assignment (which I'm guessing doesn't get output to the 
browser).  I will have to experiment with this and make sure it works 

> The usual disclaimer comes with this function... be careful.

(... of what?)

Thanks again Darren,



Erik Price
Web Developer Temp
Media Lab, H.H. Brown

PHP General Mailing List (
To unsubscribe, visit:

Reply via email to