[pmwiki-users] including a php file

[Peter & Melodye Bowers]

I've been thinking that it would be very helpful for pmwiki authors if it
was possible to see the customizations that lay behind a certain page, so I
could see not only the wiki text but also the PHP code that lays behind it.
For instance, while I was trying to figure out how to do forms with a GET
method it would have been very nice to see someone else's underlying php
which enabled it.  However, I'm having difficulty implementing the
capability of displaying PHP code on a wiki page - it seems that any PHP
code always gets eval'd rather than being displayed verbatim.

 

I've tried several permutations off of the (:includeurl .:) code.  But first
I altered it to includeMYurl and hardcoded the filename to help with
security.

 

2 questions:

(1) Would (:includemyurl:) with a hardcoded php filename (or perhaps not
hardcoded but only showing the relevant customizing script) still be a
security risk?

(2) What do I need to do to include the file as text rather than having it
be eval'd?

 

You can take a look at
http://www.ccl-al.org/pmwiki/pmwiki.php?n=Test.IncludeMyURL to see 10 of the
various attempts I've made.  As best I can make out both file() and
file_get_contents() evaluate php code if it comes from a *.php file rather
than just reading the contents (i.e., source code) of said file.  Does that
sound right?!

 

Anybody have any ideas?

 

-Peter



-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/pmwiki-users/attachments/20071128/2f84ff49/attachment.html