Why should exec() and eval() be avoided?

Question

I\'ve seen this multiple times in multiple places, but never have found a satisfying explanation as to why this should be the case.

So, hopefully, one will be prese

Answer 1

Allowing these function in a context where they might run user input is a security issue, and sanitizers that actually work are hard to write.