3 ms·
there are equivalents to eval and base64_decode in most languages (javascript, perl, python, ruby, etc). its not particularly the language's fault, either.
by noodle 16y ago
there are equivalents to eval and base64_decode in most languages (javascript, perl, python, ruby, etc). its not particularly the language's fault, either.
- jacques_chester 16y agoThere are, but in retrospect these features might be worth removing from a web-specific language, along with shell-out capability. edit: why the downvotes? Are these functions truly indispensable for this particular domain?
- dangrossman 16y agoNone of those languages are "web specific". Plenty of people write standalone programs with them. And the ability to execute shell commands isn't something you never need in a web application either. I can't count the number of PHP sites that do so, it's very common.
- jacques_chester 16y ago> None of those languages are "web specific". PHP is meant to be. OK, I'm cheating and saying how it ought to have been with the benefit of hindsight. But the next web language will hopefully take these experiences into account.
- noodle 16y agoyeah but you could still say that about any code. what's the difference between using an infected wp theme and downloading some freeware widget that also secretly logs your passwords?