Potential code injection risk with that code.

-----Original Message-----
From: Mark Steudel [mailto:[email protected]] 
Sent: Monday, February 01, 2010 2:44 PM
To: debussy007
Cc: fw-general
Subject: Re: [fw-general] Echo a string containing the full php webpage -
issue

You could try doing something like:

$html = eval( $this->html );


On Mon, Feb 1, 2010 at 11:40 AM, debussy007 <[email protected]> wrote:
>
> Hi,
>
> In a .phtml file, I echo a string generated from the associated action:
> <?php echo $this->html; ?>
>
> This string contains my full PHP Webpage, but unfortunately, the php 
> will not be interpreted and the browser will display some code.
>
> So to show some code, I have a string containing my full php webpage 
> (generated by an action), which I want to display.
> [...]
> function viewAction() {
>        $this->view->html = [...];
> }
> [...]
> in view.phtml, a single line:
>
> <?php echo $this->html; ?>
>
> How can I make this work ? Any idea ?
>
> Thank you !
> --
> View this message in context: 
> http://n4.nabble.com/Echo-a-string-containing-the-full-php-webpage-iss
> ue-tp1459193p1459193.html Sent from the Zend Framework mailing list 
> archive at Nabble.com.
>



-- 

-----------------------------------------
Mark Steudel
P: 206.375.7244
[email protected]

. : Work : .
http://www.mindfulinteractive.com

. : Play : .
http://www.steudel.org/blog

Reply via email to