Home/ Questions/Q 9067641
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-16T16:59:35+00:00

I have a simple question. If I write a php file that will result

  • 0

I have a simple question. If I write a php file that will result in echoing another correct php statement, will this be executed? For instance:

<html>
<body>
<?php echo "hello: "."<?php echo '1';?>"; ?>
</body>
</html>

Will this ever produce the output: Hello: 1 ?

I would have said no, but if I run this under Apache, the “inner echo” gets “sanitized” as <!--?php echo '1';?-->, which leads me to believe it could.

Thanks!

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Thanks God it doesn’t. In order to execute a string you should (not) use eval():

    <html>
<body>
<?php echo "hello: ".eval("echo '1';"); ?>
</body>
</html>
    • 0