If you use preg_replace with the e modifier, you can run eval on the
variables only:
http://us.php.net/preg_replace
Thank you,
Micah Gersten
onShore Networks
Internal Developer
http://www.onshore.com
Phpster wrote:
> A couple of options:
>
> 1. Use eval($databaseString); there are risks as it c
A couple of options:
1. Use eval($databaseString); there are risks as it could be used to
execute arbitrary code should the database be compromised.
2. If your data string is enclosed in single quote php won't evaluate
the variables. Consider changing the outside quotes to double quotes.
I'm emailing an html file through phpmailer and the sql look up is getting
the html from a table and setting it into a variable. Within the html from
the table are also variables that are also being called by the same sql that
is looking up the html variable. However the variable in the html are
