• Hi, Pleskians! We are running a UX testing of our upcoming product intended for server management and monitoring.
    We would like to invite you to have a call with us and have some fun checking our prototype. The agenda is pretty simple - we bring new design and some scenarios that you need to walk through and succeed. We will be watching and taking insights for further development of the design.
    If you would like to participate, please use this link to book a meeting. We will sent the link to the clickable prototype at the meeting.
  • (Plesk for Windows):
    MySQL Connector/ODBC 3.51, 5.1, and 5.3 are no longer shipped with Plesk because they have reached end of life. MariaDB Connector/ODBC 64-bit 3.2.4 is now used instead.
  • Our UX team believes in the in the power of direct feedback and would like to invite you to participate in interviews, tests, and surveys.
    To stay in the loop and never miss an opportunity to share your thoughts, please subscribe to our UX research program. If you were previously part of the Plesk UX research program, please re-subscribe to continue receiving our invitations.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.

Resolved How to disable PHP @eval function?

Hi raytracy,

pls. don't rely on informations you found over the internet. The answer from @alexonb is absolut correct and forbids the usage of the PHP command "eval". Just be informed, that you might have several PHP.ini (s) on your server, especially, when you use additional PHP - versions. ;)
If you don't trust the answer, just test it for yourself, once with the "disable_function" in your depending "php.ini" and once without it and see your log - files, to ensure, what the settings restricts.
 
I have tested it and found disable_function did not work.

Here is my work:
1. add disable_function = "eval" to /opt/plesk/php/5.6/etc/php.ini since I am using php 5.6
2. Create a php webpage from official php eval sample: http://php.net/manual/en/function.eval.php
3. Execute the php page and inspect the result page

I found the eval function always be evaluated what ever I have or have not add disable_function="eval" to php5.6 ini.
My system are CloudLinux 7.2, Plesk 12.5 mu#49

Is there any suggestion to correct it?
 
Back
Top