The only viable solution is to never give user-supplied data to eval(). ... For example, suppose your script contains this line: system("ls {$directory}"); ...
確定! 回上一頁