Is there an equivalent vb.net eval function for vbscript eval

Question

I want to execute the code that is passed as a string to my function, the code will be passed at runtime. This is an example code that may be passed as a string to my function.

p is a dataset, which is declared and has some values, this code is executed in a asp.net page

p.Tables(0).Rows(0)("disp_status") = "Approved by CEO";
p.Tables(0).Rows(0)("status") = "Approved";
Session("fnc") = "generate po";
Session("rec_id") = p.Tables(0).Rows(0)("IndexID");
Session("ord_ref")="PR No.";
Server.Execute("../rlm/mne_pr_form_f.asp"); 
p.Tables(0).Rows(0)("status") = "Order Raised" 
p.Tables(0).Rows(0)("disp_status") = "Order Raised"
p.Tables(0).Rows(0)("lock_record") = "Yes";
Session("fnc") = "";
Session("rec_id") = "";

eval functions are evil in general purpose languages. It's fine for javascript, which is sandboxed, but for other desktop apps they allow attackers to construct strings that could do anything. — Joel Coehoorn
– Joel Coehoorn, Commented Mar 30, 2012 at 15:52

Hans Olsson · Accepted Answer · 2011-01-31 12:00:06Z

3

There's no Eval function as such, but depending on exactly what you want to do, you can do things like this using Reflection and here is a CodeProject article that includes a library to let you do this: Runtime Compilation (A .NET eval statement)

answered Jan 31, 2011 at 12:00

Hans Olsson

55.1k16 gold badges99 silver badges118 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Is there an equivalent vb.net eval function for vbscript eval

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related