Sent this out several days ago - did anybody have any ideas? Is it just my configuration that's making life difficult or is this a problem elsewhere?
-Peter _____ From: Peter & Melodye Bowers [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 28, 2007 10:44 PM To: [email protected] Cc: SentN ([EMAIL PROTECTED]); Peter Gmail Bowers ([EMAIL PROTECTED]) Subject: including a php file I've been thinking that it would be very helpful for pmwiki authors if it was possible to see the customizations that lay behind a certain page, so I could see not only the wiki text but also the PHP code that lays behind it. For instance, while I was trying to figure out how to do forms with a GET method it would have been very nice to see someone else's underlying php which enabled it. However, I'm having difficulty implementing the capability of displaying PHP code on a wiki page - it seems that any PHP code always gets eval'd rather than being displayed verbatim. I've tried several permutations off of the (:includeurl .:) code. But first I altered it to includeMYurl and hardcoded the filename to help with security. 2 questions: (1) Would (:includemyurl:) with a hardcoded php filename (or perhaps not hardcoded but only showing the relevant customizing script) still be a security risk? (2) What do I need to do to include the file as text rather than having it be eval'd? You can take a look at http://www.ccl-al.org/pmwiki/pmwiki.php?n=Test.IncludeMyURL to see 10 of the various attempts I've made. As best I can make out both file() and file_get_contents() evaluate php code if it comes from a *.php file rather than just reading the contents (i.e., source code) of said file. Does that sound right?! If I rename the *.php file to *.txt then it all works fine. Anybody have any ideas? -Peter
_______________________________________________ pmwiki-users mailing list [email protected] http://www.pmichaud.com/mailman/listinfo/pmwiki-users
