Disable php eval, php can not disable eval, disable_functions invalid

Let me talk about the results:

php set disable_functions, can not be disabled eval

Since eval is the language constructor, not a function

? <PHP 
$ A = 'phpinfo'; 
$ A (); // this is can run 
$ code = 'echo Time ();'; 
$ A = 'eval'; 
eval ($ code); // this is can run 
$ a ($ code); // Call to undefined function eval () function does not exist 


/ * also being given in the following code * /                 
function the eval () { 

}

  In other words, without the use of extended premise, eval can not be disabled, but it can not hide this function by stitching or otherwise.

  To find the Trojan eval, just full-text search elements 'eval' to

 

That should be how to disable eval it?

If you want to ban can be extended Suhosin php eval of

No expansion, no way to disable

Guess you like

Origin www.cnblogs.com/echo2213/p/12367362.html