If you know a module that can execute php code when the PHP module is disabled, please list it here (with a link to an issue to make it impossible to do that via paranoia, if applicable):

Already fixed:

Comments

Mac_Weber’s picture

It is possible to use PHP in Views. Shall it be on this list?

Mac_Weber’s picture

Issue summary: View changes

x

greggles’s picture

@Mac_Weber - yes, that's the point of the list. Thought, is it possible to do that in views with the php module disabled?

If so, please be sure to clarify where/how it's possible.

larowlan’s picture

views_table_highlighter but it already required 'php'
views_php?

larowlan’s picture

views can do it in 'default argument' and 'argument validation' without php module

RobLoach’s picture

tlattimore’s picture

Don't forget Computed field module.

Per module description:

This module is intended to be used by PHP developers to insert & execute PHP code on a Drupal website.

Spleshka’s picture

I think Views PHP is also suits here.

Spleshka’s picture

Found other candidates:

I didn't have enough time to create issues for this projects. Please, let me know if I can help you here.

killua99’s picture

views PDF? sorry for not add the link I'm on my phone right now

yannickoo’s picture

yannickoo’s picture

Issue summary: View changes

x

larowlan’s picture

Matt V.’s picture

While evaluating some modules for security purposes, I gathered a list of projects that the Coder module's security checks flagged as including eval(). Please note, the list may be a bit out-of-date, definitely isn't exhaustive, and doesn't take into account the context in which eval() appears. That said, I thought it still might be useful to include here:

* navigate
* views
* rules
* media
* leftandright
* i18n
* ctools
* biblio
* unitsapi
* checkbox_filter
* autoarch
* phpmenu
* opigno_external_video_app/video_filter
* mysqlreport
* context_export
* navigate
* config_builder
* unitsapi
* checkbox_filter
* maestro
* skinr
* flag
* feeds_tamper_php
* om_tools
* cck_select_other
* google_admanager
* drd_server
* mobile_codes
* views_aggregator
* backup_migrate
* imce?
* rules
* features
* auto_nodetitle
* location
* login_destination
* computed_field
* draggableviews
* bundle_copy
* video_ui
* select_or_other
* video_filter
* finder
* bueditor
* elysia_cron
* field_validation
* custom_formatters
* viewreference
* auto_entitylabel
* getlocations
* mediafront
* popup
* moopapi
* om_maximenu
* drupalforfirebug
* wysiwyg_template
* webform_share
* hierarchical_select

## using drupal_eval()
* ip_login

greggles’s picture

Wow, thanks, Matt! Looks like we've got our work cut out for us.

greggles’s picture