Re: Play nice! Re: Savant/Flexy/Foo template engines
| From: | Greg Beaver | Date: | Wed, 09 Jun 2004 22:12:25 +0000 |
| Subject: | Re: Play nice! Re: Savant/Flexy/Foo template engines | ||
| References: | 1 2 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-30342@lists.php.net to get a copy of this message | ||
David Costa wrote:
If you mean the risk of using php to do some exec or nasty stuff, well if the contributor has access to the CVS or FTP nothing stops him to upload his own script or overwrite my pages.But as wiki shows, it is possible to give edit access without requiring direct file access. The scenario I was describing is not hypothetical, I talked to a user a while ago who vetoed my suggestion of using Savant because he wanted his users to be able to create their own pages, but didn't want to give them full access to php. Greg