How should I, or should I use php functions considered "dangerous"?
<p>Several days ago I attended a seminar and they were talking about "dangerous" PHP functions. They did not say however that should we use them. They named <code>eval()</code>, <code>preg_match()</code>, <code>exec()</code> and a lot more.</p>

<p>Though I don't use them, or don't use them often sometimes I have to. Is it considered bad practice to use those functions? Even if I know that where I use them no user can reach it?</p>

<p><strong>Edit:</strong>
For the preg_match() questions, check out this:
<a href="http://blog.php-security.org/archives/76-Holes-in-most-preg_match-filters.html" rel="nofollow">preg_match() security hole</a></p>
