1.2.2

1.2.2

The snippet lint check now reads PHP tokens, and the admin Enable button runs it before renaming a file.

After you update, turn a disabled snippet on from the Snippets screen. A file that calls eval, exec, system, shell_exec, passthru, or assert, or that uses include, require, or backticks, stays disabled and shows the error. A space before the parenthesis does not get past the check. Saving a snippet uses the same check.

A call stored in a variable, such as $fn(), is still allowed. So is call_user_func(). This is the obvious-call check, not a sandbox.