Re^3: Using Regexp Patterns as Variables

That's why I wrote this:

I can't say I recommend that, however, especially if you don't trust the source of your real $out.

Comment on Re^3: Using Regexp Patterns as Variables Download Code

Replies are listed 'Best First'.
Re^4: Using Regexp Patterns as Variables by ikegami (Patriarch) on Mar 18, 2009 at 16:56 UTC
There's no "if". `$ENV{REQUEST_URI}` is controlled by remote users. Even ignoring the evident trust issues, `eval` is simply not the right tool.	[reply] [d/l] [select]
Re^5: Using Regexp Patterns as Variables by Rodster001 (Pilgrim) on Mar 18, 2009 at 17:06 UTC
Correct. However, since the regex patterns are stored in the DB, put there by trusted users, it is effectively the same as hard coding them (without having to). $ENV{REQUEST_URI} can be mucked with without any security issues (the replacement will just fail).	[reply]