Python's eval() function

[BackRaw]

Hi all,

I remember back in the EventScripts days that the use of Python's eval() function was a 'potential risk' or something like that. I wonder if this is still true for SP because I want to make a calculator lol

[necavi]

It absolutely is. There's no true way to sandbox it, but you can do things to help restrict it if you like.

[BackRaw]

It absolutely is. There's no true way to sandbox it, but you can do things to help restrict it if you like.

True, but I'm not sure how I would go about that one tho

[necavi]

Read up on it? SourcePython's eval is the same as any other python eval, to my knowledge. There's a fuckton of information on the internet for you.

[BackRaw]

Maybe sometime.

[Mahi]

You're better off parsing a string, looking for calculations, rather than trying to use eval on it.

[satoon101]

Not 100% sure of what you are looking to do, but you 'could' also create a temp.py file within your plugins directory with a variable equaling the equation and try to import that value.

[stonedegg]

I heard ast.literal_eval() is better

[Ayuto]

Well, it does not allow you to use operators.

Check the docs: https://docs.python.org/3.4/library/ast.html#ast.literal_eval

[BackRaw]

I'll go with parsing the string i have an idea