[wp-hackers] is php code in index.php dangerous?

Alex King alex at alexking.org
Sun Jul 18 13:57:38 UTC 2004


I'm pretty sure you can execute PHP from w/in a Smarty template.

--Alex

http://www.alexking.org/


On Jul 18, 2004, at 7:54 AM, Mark Wubben wrote:

> On Sun, 18 Jul 2004 22:34:02 +1000, Michael G <michael at wakeless.net> 
> wrote:
>> The wordpress template is all PHP code, it doesn't use templates in 
>> the
>> commonly used meaning of the word. I thought I saw that that was in 
>> the
>> pipeline but certainly not at this point in time.
>
> Eric, you might build a template system (e.g. Smarty) on top of
> WordPress. If you then prevent your users from installing plugins you
> should be fine.




More information about the hackers mailing list