[pmwiki-users] PVs in PTVs not resolved by PageTextVar()

Maxim maxim at smspower.org
Wed Jul 28 08:25:46 CDT 2010


>> I can't pass the string through FmtPageName because that doesn't
>> handle this sort of string.
>
> Why not?

It substitutes things like "$Name", not "{$Name}" or
"{Group.Page$Name}", so I end up with something like
"{Group.PagePage}.jpg". Parsing out the {...} seems like hard work.

Here's what I get:

PageTextVar($pagename, 'Filename') = "{Scans.AceOfAces-SMS-EU$Name}.jpg"

FmtPagename(PageTextVar($pagename, 'Filename'), $pagename) =
"{Scans.AceOfAces-SMS-EUAceOfAces-SMS-EU}.jpg"

> Note that using FmtPagename() on user-supplied data opens potential
> security holes

I saw that at http://www.pmwiki.org/wiki/PmWiki/FmtPageName ; it's not
a concern for me.

Maxim



More information about the pmwiki-users mailing list