Oh. That’s where the mail function is called.

eval( ''$RuleRes = cf_MailInsert($row,$id);'' )

I still haven’t found where in the database the eval’d string is coming from. FML.

For background see Pure evil. This function call is the result of the eval("$doAction" . ";"); line.

This entry was posted in PHP. Bookmark the permalink.
  • Shaun

    Now that’s what I call dynamic fail.