Howdy, I am working a blogging utility that needs to be templated, and have been pondering allowing users to use their own templates. The user's templates would exist in their own directory, but they won't be chrooted there. I know I shouldn't turn on EVAL_PERL, or ABSOLUTE, and I should have RELATIVE turned on. Hoping that users don't have access to change those settings from a page being evaluated.
Just wondering about the security implications, if there other things I should do, and if there are sites out there that process pages provided by untrusted users. Thanks, Earl _______________________________________________ templates mailing list [EMAIL PROTECTED] http://lists.template-toolkit.org/mailman/listinfo/templates
