getVariableToken() bypass

[chinurho]

PHP variables syntax parsers:

T_VARIABLE
'$' '{' expr '}'

Therefore, variables allows for the use of complex expressions in ${}.
Well, getVariableToken() can be bypassed, like tihs:

${@func}($evil);
${2+1}($evil);
${1?func:func}($evil);
...

[cfc4n]

Yes, It's a bug. I'ill fixed it today. thank you very much.

[cfc4n]

hi,chinurho:
It's fixed at 0.4.3.Can you do once again to verify it?
thanks.

[chinurho]

bypass fix:

${${func}}($evil);
${(array)function(){}}($evil);

[cfc4n]

eh.You are right.I'll try it again.

[cfc4n]

OMG,I forget it for long time...So sorry.and I fixed it ,You'll try it again If you sow it.Thanks.