Page 1 of 1

On page PHP

Posted: Thu Aug 02, 2018 6:39 pm
by thomahawk
Hello CMSMS friends

I have just updated a CMSMS installation from version 1.9 to 1.11 and 1.12

One page contains a PHP code within {php} ... {/php} tags.

One single forum post mentions that {php} may not be working this way anymore since CMSMS version 1.11
viewtopic.php?f=20&t=73371&p=323481&hil ... de#p323481

but strangely I can not find any other mention on how to implement PHP on pages now (in 1.12) or ever in CMSMS...

Has someone a suggestion?

Thanks
Thomas

Re: On page PHP

Posted: Thu Aug 02, 2018 8:34 pm
by Rolf
Pages are for content, as in text and images...

Content editors should not be able to add PHP code using {php} {/php}
It is a security issue and causes a vulnerability in the system.

PHP code should be added in a UDT or plugin tag file.

Re: On page PHP

Posted: Thu Aug 02, 2018 8:48 pm
by thomahawk
Thank you for your response.

I understand the problem. But this installation was made long ago and I have to overtake it and maintain it so that it continues working.

So if I try to put it in an UDT... what IS an UDT?

Regards
Thom

Re: On page PHP

Posted: Thu Aug 02, 2018 9:00 pm
by Rolf

Re: On page PHP

Posted: Fri Aug 03, 2018 10:45 am
by thomahawk
Thank you, Rolf, this was really helpful. I was able to solve this and it worked instantly!

Greetings
Thomas