[wp-hackers] is php code in index.php dangerous?

Michael G michael at wakeless.net
Sun Jul 18 12:34:02 UTC 2004


The wordpress template is all PHP code, it doesn't use templates in the 
commonly used meaning of the word. I thought I saw that that was in the 
pipeline but certainly not at this point in time.


Michael

Eric Nash wrote:

>thus, in wordpress 1.3, the muti-users version, it should prevent
>users apply php scripts while editing template.
>
>On Sun, 18 Jul 2004 13:44:36 +0200, Mark Wubben <markwubben at gmail.com> wrote:
>  
>
>>On Sun, 18 Jul 2004 11:54:25 +0800, Eric Nash <ericnash at gmail.com> wrote:
>>    
>>
>>>say, I offer wp host for some people. wp allows them to excute some
>>>harmful php codes, is it dangerous? is there any way to prevent it?
>>>      
>>>
>>Allowing people to execute PHP code on your server is always
>>dangerous, and you can't prevent it. Do you trust them?
>>
>>_______________________________________________
>>hackers mailing list
>>hackers at wordpress.org
>>http://wordpress.org/mailman/listinfo/hackers_wordpress.org
>>
>>    
>>
>
>_______________________________________________
>hackers mailing list
>hackers at wordpress.org
>http://wordpress.org/mailman/listinfo/hackers_wordpress.org
>  
>





More information about the hackers mailing list