|
php.net | support | documentation | report a bug | advanced search | search howto | statistics | random bug | login |
PatchesPull RequestsHistoryAllCommentsChangesGit/SVN commits
[2009-05-11 09:07 UTC] jani@php.net
|
|||||||||||||||||||||||||||||||||||||
Copyright © 2001-2025 The PHP GroupAll rights reserved. |
Last updated: Tue Oct 28 06:00:01 2025 UTC |
Description: ------------ there is a commond injection in this function,you can EXECUTE your php code directly but not CREATE a lambda-style function.It is very useful when sometimes you can create a function but cann??t call your function. Reproduce code: --------------- <?php $newfunc = create_function('', '};phpinfo();//'); ?> Expected result: ---------------- phpinfo executes runtime,needn't call newfunc. Actual result: -------------- phpinfo executes runtime,needn't call newfunc.