[development] Remove PHP filter by default
karoly at negyesi.net
Sat Jan 28 21:57:56 UTC 2006
A good read is http://www.webschuur.com/node/409 . Some points I do not
care of, but:
1) As Drupal moves forward, upgrading PHP nodes is cumbersome at best.
(blocks are easier to be found)
2) The security aspect. PHP filter is just too powerful. I can debate to
death that it's safe now, no matter what -- the mere presence of PHP
filter will make baby Rasmus cry :D
However, it's true that defining a whole module is more complicated than a
php node. Is it? I submitted a patch http://drupal.org/node/46857 which
adds an 587 bytes module to core which lets you save a PHP into
something.inc and then view it at the path pages/something. It just can't
Also, defining a block is more difficult than just using a snippet. Is it?
No. The necessary module is a lot complicated this time, 690 bytes :) .
More information about the development