Skip to content

Commit

Permalink
Add create_function as a disallowed function call (#261)
Browse files Browse the repository at this point in the history
I doubt this is still used much, since it was removed in PHP 8.0
But if its present you probably want to get rid of it
  • Loading branch information
spaze authored Jul 20, 2024
2 parents f7f1dc8 + 2e913d6 commit c687ba9
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions disallowed-dangerous-calls.neon
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,10 @@ parameters:
-
function: 'eval()'
message: 'eval is evil, please write more code and do not use eval()'
-
function: 'create_function()'
message: 'the function is about as evil as using eval()'
errorTip: 'create_function() has been deprecated as of PHP 7.2, and removed as of PHP 8.0'
-
function: 'extract()'
message: 'do not use extract() and especially not on untrusted data'
Expand Down

0 comments on commit c687ba9

Please sign in to comment.