MySource.PHP.EvalObjectFactory.md

Pattern: Use of eval() to create object

Issue: -

Description

Ensures that eval() is not used to create objects. PHP has features that gives possibility to avoid using eval() in most cases.

Further Reading

• Stack Overflow - What's alternative of eval function?
• OWASP - PHP Security Cheat Sheet
• PHP_CodeSniffer - MySource.PHP.EvalObjectFactory