From: Phillip Gawlowski <cmdjackryan@...>
Date: 2008-04-05T07:59:47+09:00
Subject: Re: Using a string as executable code

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Peter Marks wrote:
|
| Thanks for your response Gaspard. The code entering part of my app is
| only for my app's backend and will not be publicly accessible. I
| definitely need to take measures to ensure it stays that way though.

It won't. That would beat all the odds of established computer security
track records.

Another place to consider: You are introducing one more point of failure
for you app, as well as a dependency that might not be necessary.

Did you look at metaprogramming? Marshal?

And a question you might want to ask yourself: Do I want to be starring
on DailyWTF as "the developer before me"?

- -- Phillip Gawlowski
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkf2suUACgkQbtAgaoJTgL8kbwCfSX4wUj5WdDnxz42+YOPyGfQd
d8IAoIblsuA62L5ur9R7XxHeSOzO3erJ
=IMHY
-----END PGP SIGNATURE-----