one line of eval could mean your server's capture
if someone was given this for even a fraction of a second, they could potentially hack your server.
You do not ever give anyone other than the host eval access
No matter how much you try, you can't fully secure eval.
you might as well write a parser and another language
Did you read what I posted?
Why should it be? If you take basic steps to secure it, such as making it host-only and perhaps creating a small blacklist to prevent file deletion, I would think it'd be fine.
