Is it possible to use PHP inside tpl-files?

[twe]

I'm in the process of integrating s9y into an existing website that uses a lot of php for other aspects of the side. Is it possible to somehow get php instructions within the tpl file executed? They are called from a php-file afterall, aren't they?

[garvinhicking]

Hi!

See the Smarty {php} syntax, and you must disable template security of your s9y template by editing/creating a config.inc.php file:

Code: Select all

<?php
$serendipity['smarty']->security = false;
?>

Regards,
Garvin

[twe]

Thanks a lot for the fast reply!

Are there any negative side effects / security risks to watch out - if you only use tpl-files that have been checked (for unwanted php)?

[garvinhicking]

Hi!

Turning of the security simply means that you can only give FTP system access to users that you absolutely trust (because they can easily executy any PHP inside your templates now). Also it means that if you've got plugins like smartymarkup, your users can inject PHP code from within their articles.

Regards,
Garvin