php eval() get attribute of object

Question

For example, post name is 'New feature'. I need to get output Post name is New feature using eval()

$post = Post::find($id);
$str = 'Post name is $post->name';
eval("\$str = \"$str\";");

This code outputs Post name is {"id":1,"name": "New feature"}->name. How to get exactly name of post with eval, not whole object?

NOTE

do not pay big attention to what is outputs exactly, it was taken like abstract, i need to take attribute of object using eval, because $str will be dynamic

Using eval in this context is just an invitation to have arbitrary code execution on your server — apokryfos
– apokryfos, Commented Jul 27, 2021 at 8:18
@apokryfos admin using editor will create different pages, so i need to get some values from db and put it to content — Danabek Duisekov
– Danabek Duisekov, Commented Jul 27, 2021 at 8:20
@DanabekDuisekov in that case you can use placeholders in the content and replace them when outputting. No eval required. for example use [post.name] in the content and str replace all when outputting. — Gert B.
– Gert B., Commented Jul 27, 2021 at 8:28

Gert B. · Accepted Answer · 2021-07-27 08:10:47Z

1

$str = 'Post name is ' . $post->name;
echo $str;

I don't recommend using eval()...

answered Jul 27, 2021 at 8:10

Gert B.

2,34720 silver badges22 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Danabek Duisekov Over a year ago

do not pay big attention to what is outputs exactly, it was taken like abstract, i need to take attribute of object using eval, because $str will be dynamic

Gert B. Over a year ago

In 99,9% of the cases there is an other solution than eval(). So always try to avoid it. Even if the $str is dynamic, I don't think eval will be the best, safest solution.

frogeyedman · Accepted Answer · 2021-07-27 08:23:44Z

1

This happens because $post will be evaluated directly in the eval function. Thus outputing {"id":1,"name": "New feature"}. Using eval is not recommended and certainly not for outputting a simple string. You can go with this instead:

$post = Post::find($id);
$str = "Post name is {$post->name}";
echo $str;

If you really need eval for some reason (there is probably a better way than eval), then this should do it:

$post = Post::find($id);
$name = $post->name;
$str = 'Post name is'.$name;
eval("\$str = \"$str\";");

edited Jul 27, 2021 at 8:23

answered Jul 27, 2021 at 8:13

frogeyedman

5241 gold badge5 silver badges23 bronze badges

2 Comments

Danabek Duisekov Over a year ago

do not pay big attention to what is outputs exactly, it was taken like abstract, i need to take attribute of object using eval, because $str will be dynamic

frogeyedman Over a year ago

@DanabekDuisekov I adjusted my answer for eval usage, but I would really advise against using it. (even the php docs tell us so.)

Collectives™ on Stack Overflow

php eval() get attribute of object

2 Answers 2

2 Comments

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related