Skip to main content
Information Security

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

5
  • I think it is eval() that was removed from PHP7, preg_replace() is still there: php.net/manual/en/function.preg-replace.php Commented Feb 23, 2016 at 12:51
  • 4
    The 'e' regex modifier is removed in 7 - php.net/manual/en/reference.pcre.pattern.modifiers.php I believe that eval is still present (its a useful construct handled correctly) Commented Feb 23, 2016 at 13:01
  • 2
    @mastazi Yes, but they removed the e (eval) modifier. Commented Feb 23, 2016 at 13:02
  • 1
    VMs are great, though for the truly paranoid you may want an airgapped machine. And if one is really interested, you could probably create a little dockerized network and use that to grok exactly what steps are happening, if the attack is more advanced anyway. Commented Feb 24, 2016 at 15:00
  • 1
    eval is language construct, not a function, thus cannot be disabled with disable_functions Commented Jul 30, 2019 at 9:11