Can I use PHP in text entry fields?

dadaIMC is very strict about the types of user input it considers to be valid. Even where input allows HTML formatting, some HTML tags are stripped out as a security precaution.

The case with PHP code is similar -- not only will the text-scrubbing routines ruin the formatting of PHP code, but raw PHP code in the text wouldn't be executed anyway. Any user-input PHP code would have to be called with the eval() function in order to indicate that it shouldn't be treated like plain text, and that would open huge security holes.

Consequently, you would not be able to, for example, create an InfoDoc page that uses a form to submit to itself and processes the data. Most of the form tags will be stripped out of the input, and the PHP code that should process the submission won't be properly executed since it isn't called through an evaluate function.

If you find yourself wanting to create pages that contain PHP code, you should probably consider looking into Module development. It's easier than you might think!

Return