CMS Made Simple Forums

Can someone explain to me the dangers of smarty PHP tags?

thanks.

an editor could add malicious php code

If people don't have access to the site, as far as editors?  Any danger then?

Thanks.

No if you are the only one that will modify content or if you trust those with access to the admin panel it is safe. May I suggest that you use a UDT instead of the smarty PHP tags? If you ever added editors you can restrict access to that, but you cannot prevent anyone from using malicious PHP if you turn those tags on.

How about through the search bar?  Any danger there?

Blessings.

As far as I know it should not be an issue on the front end. The PHP tags are used in the WYSIWYG in the admin area.

cool, gotcha, thanks.