Source.Python forums

Hi all,

I remember back in the EventScripts days that the use of Python's eval() function was a 'potential risk' or something like that. I wonder if this is still true for SP because I want to make a calculator lol

It absolutely is. There's no true way to sandbox it, but you can do things to help restrict it if you like.

necavi wrote:It absolutely is. There's no true way to sandbox it, but you can do things to help restrict it if you like.

True, but I'm not sure how I would go about that one tho

Read up on it? SourcePython's eval is the same as any other python eval, to my knowledge. There's a fuckton of information on the internet for you.

Maybe sometime.

You're better off parsing a string, looking for calculations, rather than trying to use eval on it.

Not 100% sure of what you are looking to do, but you 'could' also create a temp.py file within your plugins directory with a variable equaling the equation and try to import that value.

I heard ast.literal_eval() is better

Well, it does not allow you to use operators.

Check the docs: https://docs.python.org/3.4/library/ast.html#ast.literal_eval

I'll go with parsing the string i have an idea