Eval() feature on class-wpcode-snippet-execute.php

  • Resolved clip1492

    (@clip1492)


    1 year, 3 months ago

    I’m about to disable the PHP eval() function with Suhosin or similar for security reasons.

    However I found on includes/class-wpcode-snippet-execute.php that eval() is still being used.

    QUESTIONS:

    • What consequences will happen when eval() is disabled at PHP level?
    • Will the code snippets be rendered anyway?
    • Or what exact features will not work?
    • Do you plan to get rid of eval() on future versions?
    • This topic was modified 1 year, 3 months ago by clip1492.
Viewing 1 replies (of 1 total)
  • Plugin Author Mircea Sandu

    (@gripgrip)

    1 year, 3 months ago

    Hi @clip1492,

    Without eval, WPCode will not be able to execute any PHP snippet. All other code types will work the same.

    We are not planning to get rid of eval at this time, as that’s needed to execute code dynamically.

Viewing 1 replies (of 1 total)

The topic ‘Eval() feature on class-wpcode-snippet-execute.php’ is closed to new replies.

Tags