[development] security: people can no longer "administer" blocks.

Neil Drumm drumm at delocalizedham.com
Thu Jan 5 20:53:55 UTC 2006


Bèr Kessels wrote:
> The reason is simple: PHP input. 
> It is too late, sorry for that, but I only realize this now[1]. allowing users 
> to paste PHP is a security issue, a severe one. 

I assume this is the PHP associated with block visibility. I'd 
definately like to see that go away. I might have a chance to code up my 
ideas after 4.7 is out, but I'm not going to touch it until then.

-- 
Neil Drumm
http://delocalizedham.com/


More information about the development mailing list