From: Christian W. <cw...@cw...> - 2007-01-26 05:54:26
|
> Point is, there is no way to secure eval(), that's why everyone warns > you from using it. It isn't even (except under very certain conditions)= > allowed in PEAR. And, eval is very similar to evil - now you know why := ) I think a security advisory should be posted on the homepage with the "solution" to not allow arbitrary code or to disable sparql at all. --=20 Regards/Mit freundlichen Gr=FC=DFen Christian Weiske |