Eval() is not a function in PHP. How to be?

Question

PHP

In PHP, eval() is not a function: "Because this is a language construct and not a function, it cannot be called using variable functions" ( link ).
The disable_functions option in php.ini does not affect eval().
How to disable eval() without resorting to safe mode?

Answer 1

Maybe this will help you www.hardened-php.net/suhosin/configuration.html#suhosin.executor.disable_eval

Answer 2

maybe just put a suhosin-patch that disables it and does other useful things?

Answer 3

besides eval, there are a bunch of other ways to execute php code.
for example:
1. $newfunc = create_function('', '};phpinfo();//');
2. preg_replace with the /e
modifier 3. backticks: `ls -lia`
4. and a bunch of other tricks...

Answer 4

the correct answer is never to use eval.
In most cases, this is
php.net/manual/en/function.call-user-func.php
If you can't do without eval(), then something in your code is wrong.