Add check for create_function calls

[mschwager]

Calling create_function is effectively an eval call and thus should be avoided :)

https://secure.php.net/manual/en/function.create-function.php