How Can I Safely Execute Python Code from a String?

Executing Python Code from a String

In Python, there are several ways to execute code contained within a string. However, it's crucial to approach this task with caution to avoid security vulnerabilities.

The preferred method for executing statements stored in a string is to utilize the exec function. Python 3 uses exec(string) syntax, while Python 2 uses exec string. For instance:

my_code = 'print("Hello world")'
exec(my_code)

Output:

Hello world

If you require the value of an expression, use the eval(string) function instead:

x = eval("2+2")

Output:

4

However, before resorting to code execution from a string, consider safer alternatives such as higher-order functions. Executing code dynamically can introduce security risks and performance bottlenecks. Always assess whether it's the most appropriate solution.

The above is the detailed content of How Can I Safely Execute Python Code from a String?. For more information, please follow other related articles on the PHP Chinese website!