Download the PHP package vanderlee/expression without Composer
On this page you can find all versions of the php package vanderlee/expression. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download vanderlee/expression
More information about vanderlee/expression
Files in vanderlee/expression
Package expression
Short Description Safe, eval()-based simple and extendable expression parser
License MIT
Homepage https://github.com/vanderlee/PHP-Expression
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package expression
PHP-Expression
Version 1.0.2
Simple and fast PHP expression parser, based on secure use of eval().
Compatible with PHP 7.1 and up.
Using eval() is evil()
This class tries to expose a subset of PHP functionality not by removing the bad features, but by explicitely allowing only the good features.
IF YOU FIND ANY (POTENTIAL) SECURITY ISSUE, PLEASE REPORT!
Since PHP-Expression uses eval(), it can also handle PHP syntax, including
parenthesis, arithmetic, functions and more.
Things you are allowed to do
- Use numbers, either floating-point or integer, including negative.
- Use a number of different bases, such as decimal, octal, hexadecimal.
- Use most basic math functions such as
abs(),min(),max()andsqrt(). - Use basic arithmetic operators
+,-,*,/and%. - Use parenthesis.
- Use comparisons (
true/falsereturns1/0decimal). - Use boolean operators in comparisons.
- Use bitwise operators.
- Use textual boolean operators like
and,xorandor
Things we've added
- Binary numbers, using a
0bprefix. i.e.0b1001110. - New functions/function aliasses.
- Support to use number "types" using prefixes.
- Boolean operator
^^for logical XOR (same asxor). - Textual boolean operator
not(same as!).
Things you should NOT be able to do
- Access functions not explicitely permitted.
- Access static classs method not explicitely permitted.
- Access class properties or functions.
- Access system constants.
- Access variables, local or global.
- Access Expression class itself.
- Access namespace functions.
- Access arrays of any kind, using either brackets or accolades.
- Use strings.
- Return anything except numbers (integer or floating-point, 1/0 for boolean results).
Things you cannnot do
- Ternary operator (
x ? y : z) not supported. - Elvis operator (
x ?: z) not supported. - Null-coalescing operator (
x ?? z) not supported. - Spaceship operator (
x <=> y) only supported on PHP 7 and up (it's a PHP 7 feature).
Available functions
TODO
Disclaimers
Though this class has been tested and independantly reviewed by several people, I cannot make any absolute 100% guarantee that it cannot be hacked. If you find any potential security problem, please let us know.
Even though the Expression class itself is supposed to be secure, the return value may still be abused if your code does not check for validity. Only numbers can be returned, but if your code crashes on a number "666", the Expression class cannot and will not be able to protect you. Check for valid ranges.
