[pmwiki-users] PVs in PTVs not resolved by PageTextVar()
Maxim
maxim at smspower.org
Wed Jul 28 08:25:46 CDT 2010
>> I can't pass the string through FmtPageName because that doesn't
>> handle this sort of string.
>
> Why not?
It substitutes things like "$Name", not "{$Name}" or
"{Group.Page$Name}", so I end up with something like
"{Group.PagePage}.jpg". Parsing out the {...} seems like hard work.
Here's what I get:
PageTextVar($pagename, 'Filename') = "{Scans.AceOfAces-SMS-EU$Name}.jpg"
FmtPagename(PageTextVar($pagename, 'Filename'), $pagename) =
"{Scans.AceOfAces-SMS-EUAceOfAces-SMS-EU}.jpg"
> Note that using FmtPagename() on user-supplied data opens potential
> security holes
I saw that at http://www.pmwiki.org/wiki/PmWiki/FmtPageName ; it's not
a concern for me.
Maxim
More information about the pmwiki-users
mailing list