[theme-reviewers] Theme Reference Page Help

Mario Peshev mario at peshev.net
Sat Aug 27 15:22:55 UTC 2011


file_get_contents loads data from external resources. This could be
potentially dangerous because your theme users have no control over the
external resource and in case of the following one get hacked or poisoned in
some way, so are the themes of your users. That's why every external
operation could be risky due to the lack of information and protection
guarantee.

Mario Peshev
freelance software developer/trainer
http://www.linkedin.com/in/mpeshev
http://peshev.net/blog



On Sat, Aug 27, 2011 at 6:16 PM, Qamar Ashraf <life.object at gmail.com> wrote:

> Hello,
> I have integrated a *"Theme Reference"* page to provide some useful
> information about my framework. I am going to load remote data by reading
> RSS Feed. Here is the code logic,
>
>  function get_chip_life_feed( $feed_url ) {
>>     $content = file_get_contents( $feed_url );
>>     $feed = new SimpleXmlElement( $content );
>> return $feed;
>> }
>> $feed = get_chip_life_feed( '
>> http://www.tutorialchip.com/feed/chip-life-tutorials/' );
>
>
> I have got following Warning after submitting the theme,
>
> WARNING: *file_get_contents* was found in the file *tutorials.php* possible
> file operations.
>
> Is it now allowed to load data via RSS ?
> So how can i load dynamic data without this ?
>
> Help is really appreciated.
>
> --
> Regards
> Qamar Ashraf
> Project Manager
> www.tutorialchip.com
> www.freestockphotosclub.com
> www.twunfollowapp.com
> @lifeobject1
>
>
> _______________________________________________
> theme-reviewers mailing list
> theme-reviewers at lists.wordpress.org
> http://lists.wordpress.org/mailman/listinfo/theme-reviewers
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wordpress.org/pipermail/theme-reviewers/attachments/20110827/80cbe0f8/attachment.htm>


More information about the theme-reviewers mailing list