Forum d'entraide PHPFrance

$tab[0]= fonction0(); 

$tab[0]= "fonction0();" 

eval($tab[0]);

$tab[0]= date('d-m-Y H:i:s');
$tab[1]= date;

echo $tab[0];
echo '<br />';
echo $tab[1]('H:i:s');

je vais tester ça, merci. Mais pourquoi est-ce déconseillé d'utiliser eval?

Eval’s Inherent Security Risk

Eval by its nature is always going to be a security concern. You taking a string from an external source and bringing it into your PHP script, you can think of attacks of this nature to being equivalent to SQL injection though they can generally cause a lot more damage ($GLOBALS generally contains your DB password and PHP has lots of filesystem functions). Now proper escaping and data cleaning should mitigate these risks but its easier to just avoid them whenever possible.
Uses of Eval

Eval has 3 primary uses, providing compatability between php versions, generating class definitions and logic at runtime, and call functions with variable names. Now when we look at these 3 use cases the actual when to use eval choice breaks down like this: using eval for compat is great, for logic is good if there is no other way, and NEVER to call functions.

Notice: Use of undefined constant date - assumed 'date' in c:\program files\easyphp1-8\www\coop2\form_fertilisation.php on line 209
11-03-2006 16:00:57
16:00:57

Notice: Undefined offset: 1 in c:\program files\easyphp1-8\www\coop2\form_fertilisation.php on line 213

Fatal error: Call to undefined function: () in c:\program files\easyphp1-8\www\coop2\form_fertilisation.php on line 213

$tab[1]= date;   // pas correct
$tab[1]= 'date'; // correct