[pmwiki-users] Include PHP Script in Page Markup
Clemens Gruber
cgruber at uni-osnabrueck.de
Thu Aug 10 04:21:07 CDT 2006
Thomas -Balu- Walter wrote:
>On Wed, Aug 09, 2006 at 09:58:22PM +0200, Clemens Gruber wrote:
>
>
>>Is there a markup like
>>(:includephp special-mailform.php:)
>>
>>to embed a PHP sciipt in a PmWiki page. In the most cases this shouldn't
>>be a security risk - even if in an open wiki - when to user is not able
>>to load a own script to the server. Can anybody help me?
>>
>>
>
>It might get one though. PHP allows to include files from other
>webservers using include('http://...'). So you'd have to do some sanity
>checks to make sure it's only a filename and that it might be loaded
>only from a special directory?
>
Hi Balu,
thats not the problem. The PHP scirpt is on the same server. The problem
is the markup code for something like
(:includephp script.php:)
Clemens
More information about the pmwiki-users
mailing list