The security and the eval() issue