[pmwiki-users] Re: PHP code in pages

Hans design at flutesong.fsnet.co.uk
Thu Jun 30 11:00:04 CDT 2005


Thursday, June 30, 2005, 4:19:37 PM, Patrick wrote:
> In other words, only an admin is allowed to edit a page?

> There's not really a way to prevent someone with edit permissions from
> placing lines with <?php ... ?> in a page (or editing one that is already
> present); all we can control is what happens when those lines are 
> displayed to a browser.

why not protect the page via its attributes, and put in as edit and
attr password the general admin password (as set in config.php),
or use AuthUser and create a user called say 'admin' with  a special
password, and protect the page via its attributes by setting the edit
and attr password to 'id:admin'

Both methods will protect the page against other users.
And nobody other than admin will be able to edit it or change its
attributes.


Best, 
~Hans                           




More information about the pmwiki-users mailing list