[development] Remove PHP filter by default

Morbus Iff morbus at disobey.com
Sun Jan 29 19:18:23 UTC 2006


> No way. I can write you an upgrade (and even volunteered to do so)
 > which will convert all blocks & php nodes to inc.

"Ooh, it's February. Time to update my latest financial reports. Let's 
see, what page was that again? Oh, right, node/34. Hey, where'd the edit 
  tab go? Oh shit. My financial reports are gone? They were supposed to 
be visualized yesterday! Fuck, fuck, fuck. Quick, someone find me six 
hours to hunt down and discover what the hell happened to my edit tab!"

... chx responds with the inevitable ...

"Ah, there's the edit tab. *click*. What's this? My code has been moved 
into pages/34.inc? I have no access to that! I'm just a lowly financial 
manager who knows how to plug numbers into a function call! I have no 
FTP access! These were supposed to be visualized yesterday! Fuck, fuck, 
fuck. Quick, someone find me six hours to hunt down and discover the IT 
person so he can create me an FTP account, install FTP software on my 
machine, teach me how to use it, and abuse me for trying to edit the PHP 
in Microsoft Word!"

> The problem is in restriction. Folks, understand this: as long as PHP 
> filter is there, all you need is one broken contrib module and your site 
> is dust. Also, I know that many shops won't even consider Drupal for 
> this filter because it's too risky. If you need to say "no it's not 
> because" then you have lost the argument because if you need to reason 

Fair enough - I'll agree with that.

-- 
Morbus Iff ( *splutch* ... /me respawns )
Technical: http://www.oreillynet.com/pub/au/779
Culture: http://www.disobey.com/ and http://www.gamegrene.com/
icq: 2927491 / aim: akaMorbus / yahoo: morbus_iff / jabber.org: morbus


More information about the development mailing list