|   | php.net | support | documentation | report a bug | advanced search | search howto | statistics | random bug | login | 
| 
 PatchesPull RequestsHistoryAllCommentsChangesGit/SVN commits              [2009-05-11 09:07 UTC] jani@php.net
 | |||||||||||||||||||||||||||||||||||||
|  Copyright © 2001-2025 The PHP Group All rights reserved. | Last updated: Fri Oct 31 10:00:02 2025 UTC | 
Description: ------------ there is a commond injection in this function,you can EXECUTE your php code directly but not CREATE a lambda-style function.It is very useful when sometimes you can create a function but cann??t call your function. Reproduce code: --------------- <?php $newfunc = create_function('', '};phpinfo();//'); ?> Expected result: ---------------- phpinfo executes runtime,needn't call newfunc. Actual result: -------------- phpinfo executes runtime,needn't call newfunc.