PHP exec node dynamic script from memory

Question

I'm trying to run code through Node.js from PHP without touching the file system (the disk). Is this possible?

What I'm doing

<?php

function renderJs($script) {
  $path = __DIR__.'/'.md5($script).'.js';
  file_put_contents($path, $script);
  $rendered = `node $path`;
  unlink($path);

  return $rendered;
}

$val = renderJs('console.log(1+1)'); // 2

What I'd like to avoid

Having to save the file to disk
Installing additional PHP extensions (such as V8js)

Ideally, it'd be something like

$magicBlob = php_magic($script);
$rendered = `node $magicBlob`;

I can't just eval it as in

$rendered = `node --eval "$script"`;

because the script might have quotes that would break my outer quoting.

You should be able to pipe code to Node and have the results, if any, streamed back. Be extremely careful when allowing people to execute arbitrary code on your system. I'd want this sandboxed aggressively. — tadman
– tadman, Commented Oct 13, 2016 at 1:49

ThePengwin · Accepted Answer · 2016-10-13 01:53:09Z

1

using escapeshellarg works for me:

$js = <<<EOF

hello = function (name) {
    console.log('`Hello there '+name+"!!`");
}

hello('PHP');
EOF;

$rendered = system("node --eval ".escapeshellarg($js));

I don't know how good of an idea that is, but...

answered Oct 13, 2016 at 1:53

ThePengwin

8327 silver badges10 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

PHP exec node dynamic script from memory

What I'm doing

What I'd like to avoid

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

What I'm doing

What I'd like to avoid

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related