|
On 01/17/2012 05:08 PM, joao lobato wrote:
Also also, when you do need to use loadstring(), you should consider using string.format() instead of all the string concatenation.
Lua handles string concatenation quite well. I long chain of `..' operations will just emit a series of register loads followed by a single CONCAT opcode.
On the other hand, string.format has the %q option which makes it safer for building strings that will be compiled. Perhaps this is what Joao was implying. Doing `code = "'" .. some_string .. "'"' invites arbitrary execution if some_string isn't properly protected.
-- - tom telliamed@whoopdedo.org