Re: template, not template that is the problem.

Symbulos Partners wrote:

Dear friends, thanks for all the advice from you gurus. I have moved the thread to the main group. I have changed the title. From what you said, from all the documentation / articles you suggested, there seems to be scarce utility in using templating engines even for mid to large scale application.

uhm .. no like I said using template engines that do regexp based search and replace protect you against template designers injecting logic (or even malicous php code) into your system. it sounds like in your situation this is a must.

So the best way forward seems to be using php with function / classes.

if you go that route you either have to trust your template designers or you can place your hope in security parsers. Like the following one: http://bluga.net/projects/PHPCodeAnalyzer/ regards, Lukas