the user from doing all the bad things he want without needing you to add eval. if you're doing raw SQL calls to a webserver than it's not really eval's fault here.
as for the errors won't they also happen if you wrote a normal parser ? why is eval at fault here.
The article linked says some good points about extensions being able to abuse it but I'll have to search a bit about that.
how will your parser error on number + character input
why is eval at fault here Because it can always do more than you intended
Обсуждают сегодня