Level 122
use your own placeholder scheme. Don't evaluate their input as PHP its too dangerous.
here I use square brackets to denote my placeholders
https://www.dropbox.com/s/abhkuvwkfdqg19r/r4fbtemplates.jpg?dl=0
1 like
Aug 27, 2020
5
Level 7
how to secure php syntax for user input?
lets say i want user to write their own notification content with php syntax, how to make sure their input does not interfere with current application instead using twig.
Level 7
currently doing that, so thats it? and im good?
anyways, tq man
Level 102
You can also look into using twig if you need them to be allowed to do more.
Level 7
@sinnbeck kinda overkill tho, already exclude twig in my question.. tq anyway :)
Level 102
Oh sorry must have missed that :) Nevermind
1 like
Please or to participate in this conversation.