php - Is it safe to use count() on unsanitized array? php

Question

Possible Duplicate:
Can php variable hold harmfull code safely?

Let's say I have array named $content. The array holds harmfull data.

Is it safe to do the following?

$test = count($content);
echo $test;

Would count() somehow execute the harmfull data?

Answer 1

长话短说：不用担心。

长话短说：

Count 将返回一个 int，并且不应执行任何操作。这不是一个非常复杂的功能，所以我怀疑它甚至可能有这样的错误，但事实是

1. 它不应该执行任何事情
2. 如果是这样，这是一个错误。
3. 据我所知，它从未被报道过。
4. 因此，没有真正的理由认为这是一种风险。
5. 如果您仍然认为可以，您可以查看源代码以检查课程

Answer 2

As far as I'm aware, you'd have to eval() any code for it to actually be executed in the manner you describe. So no, nothing would get executed.

Answer 3

count对PHP 未清理的数组是安全的。

但是不要eval在你的 SQL 语句中使用它并很好地清理它，以防止 SQL 注入