Comment 1 for bug 1185693

Revision history for this message
Robert Lyon (robertl-9) wrote :

Are you meaning the use of create_function() that is peppered thru mahara code? As I noticed that PHP.net says:

Caution: This function internally performs an eval() and as such has the same security issues as eval(). Additionally it has bad performance and memory usage characteristics. If you are using PHP 5.3.0 or newer a native anonymous function should be used instead.

So I guess we should convert those to anonymous functions soon