eval2 security considerations
Please keep in mind that this program was written for developers - and as such it's assumed a developer would never put this outside of development environment. In other words, do not put this on www.yoursite.com - ever!
Specific concerns:
- Avoid using unlink()
- Jail this program with httpd.conf and php.ini
- Again, for the love of all that is holy, do not run this program on a live server
- Be careful. Know what you're doing.
Secure version
If you absolutely need to have this program on a live server, wait for the secure edition release. If you don't have SSL, and can't lock down its directory, the program will still communicate securely..