News for hackers. Stuff that matters.
Re:Evil Teacher: Code Injection in Moodle by sannee on Tuesday June 12, 2018 @08:46PM (#17299355)
Or use whatever tools are included in their language for safely evaluating strings (like ast.literal_eval in Python).
Re:Evil Teacher: Code Injection in Moodle by Something1234 on Tuesday June 12, 2018 @09:22PM (#17299524)
It's PHP there is none. In fact most languages don't include a safe way to evaluate strings out of the box.
Re:Evil Teacher: Code Injection in Moodle by jsjohnst on Tuesday June 12, 2018 @10:47PM (#17299860)
> It's PHP there is none.

This seems to disprove that, no?

https://secure.php.net/manual/en/runkit.sandbox.php

Re:Evil Teacher: Code Injection in Moodle by Something1234 on Tuesday June 12, 2018 @10:58PM (#17299896)
Allow me to rephrase, no cheap way to evaluate arbitrary strings without spinning up another vm.
Re:Evil Teacher: Code Injection in Moodle by jsjohnst on Tuesday June 12, 2018 @11:42PM (#17300065)
That’s not true either.
Re:Evil Teacher: Code Injection in Moodle by workinthehead on Wednesday June 13, 2018 @12:19AM (#17300215)
explain?
Re:Evil Teacher: Code Injection in Moodle by workinthehead on Wednesday June 13, 2018 @12:19AM (#17300214)
That's an extension. It doesn't come with PHP (not "out of the box").
Re:Evil Teacher: Code Injection in Moodle by jsjohnst on Wednesday June 13, 2018 @09:26AM (#17302802)
Rails doesn’t come with a default install of Ruby. Xcode doesn’t come pre-installed on macOS. You have to install Chrome on every major desktop OS as it doesn’t come by default.

Installing and configuring your environment to your needs should be entry level stuff for a developer, so what was the point of your reply?

[dead]
Re:Evil Teacher: Code Injection in Moodle by jsjohnst on Wednesday June 13, 2018 @11:02AM (#17303724)
> Can you explain why PHP developers are so uniquely unable to accept honest criticism of their language? Like, whence all the butthurt, bro?

I’m not a PHP developer. Nice try to deflect though! You obvious have an agenda you are trying to push at all costs and don’t want to learn, so have a great day!