I'm using Zend_Reflection to generate an extended format set of ctags for use with my text editor. The problem is that you have to \[code\]include\[/code\] any files that you wish to process.The constructor for \[code\]Zend_Reflection_File\[/code\] checks to see if the file you wish to reflect has been included, and if not it throws an exception: \[code\]// From Zend/Refection/File.php (94-97)if (!$fileRealpath || !in_array($fileRealpath, get_included_files())) { require_once 'Zend/Reflection/Exception.php'; throw new Zend_Reflection_Exception( 'File ' . $file . ' must be required before it can be reflected');} \[/code\]I only use this technique on code that I trust but I'd like to wrap it all up in a script for others to use. My concern is that any included files may introduce unsafe code into the current scope. For example, I wouldn't want to include the following: \[code\]<?php// evil.phpshell_exec('rm -rf /');\[/code\]My first thought was to use \[code\]safe_mode\[/code\] but this is depreciated (and not as safe as the name would suggest it seems). The next idea would be to use a custom php.ini file and the \[code\]disable_functions\[/code\] directive but (beyond the candidates listed in the \[code\]safe_mode\[/code\] documentation) I couldn't be sure that I'd caught all the necessary functions. Finally I'm wondering if there's any way of making PHP run in a sandbox (of sorts) -- I'd like to capture the Reflection information without any global code that was included being executed at all. Any and all thoughts appreciated.TIA.