Suhosin并禁用eval功能(Suhosin and disable eval function)

 我在专用的CentOS服务器上安装了Suhosin。 centos6.7+php5.4.41+suhosin0.9.36 
 
 我想启用Suhosin的禁用eval功能。 我浏览了文档，根据我的理解，最好的方案是在php.ini中添加： 
 
[suhosin]
suhosin.executor.eval.blacklist= phpinfo,passthru,exec,system,chroot,scandir,chgrp,chown
 
 但它不会阻止eval执行phpinfo（）， <?php eval(phpinfo());?> 。 
 
 真的希望有人可以指出我的错误。 

I have installed Suhosin on my dedicated CentOS server. centos6.7+php5.4.41+suhosin0.9.36
 
I would like to enable Suhosin's disable eval function. I went through the documentation and from what I understood, the best scenario was to add this in php.ini:
 
[suhosin]
suhosin.executor.eval.blacklist= phpinfo,passthru,exec,system,chroot,scandir,chgrp,chown
 
but it will not prevent eval from executing phpinfo(),<?php eval(phpinfo());?>.
 
Really hoping someone can point out my mistake.

原文：https://stackoverflow.com/questions/37063160