Dangerous functions

The scanner blocks known-risk PHP functions before activation when the feature is enabled.

Functions like eval, system, or shell execution helpers can be flagged. Review the block list in Settings.

Best practices

  • Avoid dynamic code execution in snippets
  • Do not paste unreviewed code from forums or AI tools
  • Keep snippets small and auditable
Dangerous function scan options in Settings Safety
Dangerous-function scanning is controlled in Settings → Safety