That is my understanding too. But then when I was reading the article, there was a line somewhere that in order for the exploit to be successful, the server needs to be using eval
That is my understanding too. But then when I was reading the article, there was a line somewhere that in order for the exploit to be successful, the server needs to be using eval
phoenixz@lemmy.ca 1 day ago
Literally the first thing indo after installing PHP is disabling the eval and assert functions.asssert() might might be useful in unit tests but thats about it, but eval is just plain evil and should never be used and if you do you are doing whatever you are doing, wrong.