Re: Re: template, not template that is the problem.
| From: | Lukas Smith | Date: | Fri, 25 Mar 2005 13:19:43 +0000 |
| Subject: | Re: Re: template, not template that is the problem. | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.pear.general |
| Request: | Send a blank email to pear-general+get-18333@lists.php.net to get a copy of this message | ||
Foxmask wrote:
the designer can attempt to fool smarty and add malicious php code which is then executed. likely to be much more dangerous than evil html or javascript since it will execute directly on the server. regards, Lukasnever trust smarty to ensure that template designers can introduce evil codeby designer i mean someone who just writes the html part. so i dont see where the designer can introduce evil code or i dont understand what's you think in "evil code"