You are loading code from a string into your application and running it. Unless you have compete and absolute control over the string (you create it yourself, and no part of it comes from outside our program), there is always a way for someone to inject some malicious code into your program.
Reputation Points: 975
Solved Threads: 140
Posting Virtuoso
Offline 1,624 posts
since Feb 2007