How to execute string php code to run

Question

I have got string response is "<?php $a=array("10","20"); echo $a[0]+a[1]; ?>"

How to execute this string. I use PHP 7.0.

Please give any solution.

Why is this tagged with json, laravel, codeigniter and yii? Looks like tag-spamming. — M. Eriksson
– M. Eriksson, Commented Jul 24, 2017 at 13:07
You can use eval() but is rare and dangerous it use, why tou got this response string ? — kip
– kip, Commented Jul 24, 2017 at 13:08
You could use php.net/manual/en/function.eval.php and open yourself to a variety of security problems. Also see stackoverflow.com/questions/951373/when-is-eval-evil-in-php/…. — localheinz
– localheinz, Commented Jul 24, 2017 at 13:08
Out of curiosity, where does the string come from and why do you need to execute it? — M. Eriksson
– M. Eriksson, Commented Jul 24, 2017 at 13:10

Antoniu Livadariu · Accepted Answer · 2017-07-24 13:21:29Z

8

As already stated you can use eval($string);. Beware that eval() evaluates a string as PHP code, so you need to be careful with the strings you allow to be passed!

If you take the string yourself from a predefined set of strings you created (using a swtich statement or something similar) it shouldn't be a problem.

If the string comes from the outside (user input or cURL requests or whatever) you shouldn't trust it and you should avoid using this method.

answered Jul 24, 2017 at 13:21

Antoniu Livadariu

1797 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Renuka s Over a year ago

I have using eval('?>'.$string.'<?php;');

BedOmar Over a year ago

@Renukas, I know it is tooooo late to comment smth here, but mb it will be helpful for someone else. Beware too, because $string could contain "<?php ... ?>", so in your example, you aren't avoiding executing php code

Collectives™ on Stack Overflow

How to execute string php code to run

1 Answer 1

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related