[phpldapadmin] [ phpldapadmin-Patches-3391039 ] Remove eval commands from PHP code

Patches item #3391039, was opened at 2011-08-13 20:16
Message generated for change (Tracker Item Submitted) made by gruberroland
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498548&aid=3391039&group_id=61828

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Roland Gruber (gruberroland)
Assigned to: Nobody/Anonymous (nobody)
Summary: Remove eval commands from PHP code

Initial Comment:
Hi Deon,

here is a patch to remove all "eval" commands from the PHP code. These commands are risky because it may be possible to inject code.
Although I cannot give you an example where this is possible at the moment, I recommend to remove them.

There are also JS eval commands that are not covered by this patch. Probably it would be an good idea to replace them, too.


Best regards

Roland

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498548&aid=3391039&group_id=61828

------------------------------------------------------------------------------
FREE DOWNLOAD - uberSVN with Social Coding for Subversion.
Subversion made easy with a complete admin console. Easy 
to use, easy to manage, easy to install, easy to extend. 
Get a Free download of the new open ALM Subversion platform now.
http://p.sf.net/sfu/wandisco-dev2dev
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/