Most of my templates do not render PHP.
However, I was considering using some PHP code in the header template, which is embedded in all other templates.
Does this make the containing template vulnerable?
This is an archived forum and the content is probably no longer relevant, but is provided here for posterity.
The active forums are here.
November 02, 2010 5:40pm
Subscribe [3]#1 / Nov 02, 2010 5:40pm
Most of my templates do not render PHP.
However, I was considering using some PHP code in the header template, which is embedded in all other templates.
Does this make the containing template vulnerable?
#2 / Nov 03, 2010 8:22am
FurturShoc, have you seen:
http://ellislab.com/expressionengine/user-guide/templates/php_templates.html
This should give you enough information to make a decision.
#3 / Nov 03, 2010 12:23pm
Thanks! It looks to me like security isn’t so much an issue for me since I’ll have no users with access to make template changes.
#4 / Nov 03, 2010 5:12pm
Excellent. Please don’t hesitate to post again as needed.