I think we should change the extension file HTML to PHTLM or something else and forbid access to these file through .htaccess for security reasons.
Otherwise, a browser could ask a skeleton file and grab some php code (if some php code exists in these html file).
Also, is it possible to put all these files in a specific directory; for example: /template ?
Steve
_______________________________________________
spip-en@rezo.net - http://listes.rezo.net/mailman/listinfo/spip-en
When you download a skeleton, there is no SPIP tag and no more PHP
instructions, because the browser do not understand them.
If you want to put the skeletons in a specific directory, you must specify
it in the "mes_fonctions.php" (did George translate it in english ?) with
this PHP instruction :
<?php
$GLOBALS['dossier_squelettes'] = 'template';
?>
'dossier_squelettes' means 'skeleton_file' (but may be it has been
translated).
Bernard Martin-Rabaud
martinrabo@wanadoo.fr
-----Message d'origine-----
De : spip-en-bounces@rezo.net [mailto:spip-en-bounces@rezo.net]De la
part de steve
Envoye : samedi 24 mai 2003 11:27
A : spip-en@rezo.net
Objet : [Spip-en] HTML filesI think we should change the extension file HTML to PHTLM or
something else
and forbid access to these file through .htaccess for security reasons.
Otherwise, a browser could ask a skeleton file and grab some php code (if
some php code exists in these html file).Also, is it possible to put all these files in a specific directory; for
example: /template ?Steve
_______________________________________________
spip-en@rezo.net - http://listes.rezo.net/mailman/listinfo/spip-en
_______________________________________________
spip-en@rezo.net - http://listes.rezo.net/mailman/listinfo/spip-en
Bernard Martin-Rabaud wrote:
When you download a skeleton, there is no SPIP tag and no more PHP
instructions, because the browser do not understand them.If you want to put the skeletons in a specific directory, you must specify
it in the "mes_fonctions.php" (did George translate it in english ?)
No I didn't. mes_fonctions.php3 is created by the user, it doesn't come with SPIP.
with
this PHP instruction :
<?php
$GLOBALS['dossier_squelettes'] = 'template';
?>'dossier_squelettes' means 'skeleton_file' (but may be it has been
translated).
Not yet but the expression has been translated into "templates".
George
_______________________________________________
spip-en@rezo.net - http://listes.rezo.net/mailman/listinfo/spip-en
But the file mes_fonctions.php3 is included in inc-calcul.php3 (root
directory), as well as mes_options.php3 which is included in
ecrire/inc_version.php3
Bernard Martin-Rabaud
martinrabo@wanadoo.fr
-----Message d'origine-----
De : spip-en-bounces@rezo.net [mailto:spip-en-bounces@rezo.net]De la
part de George Kandalaft
Envoye : samedi 24 mai 2003 13:07
A : spip-en@rezo.net
Objet : Re: [Spip-en] HTML filesBernard Martin-Rabaud wrote:
> When you download a skeleton, there is no SPIP tag and no more PHP
> instructions, because the browser do not understand them.
>
> If you want to put the skeletons in a specific directory, you
must specify
> it in the "mes_fonctions.php" (did George translate it in english ?)No I didn't. mes_fonctions.php3 is created by the user, it doesn't come
with SPIP.> with
> this PHP instruction :
> <?php
> $GLOBALS['dossier_squelettes'] = 'template';
> ?>
>
> 'dossier_squelettes' means 'skeleton_file' (but may be it has been
> translated).Not yet but the expression has been translated into "templates".
George
_______________________________________________
spip-en@rezo.net - http://listes.rezo.net/mailman/listinfo/spip-en
_______________________________________________
spip-en@rezo.net - http://listes.rezo.net/mailman/listinfo/spip-en
You find that in inc-calcul.php3 it is included "if it exists":
if (file_exists("mes_fonctions.php3")) {
include_local ("mes_fonctions.php3");
}
as for inc_version.php3, I don't see any mention of it.
George
Bernard Martin-Rabaud wrote:
But the file mes_fonctions.php3 is included in inc-calcul.php3 (root
directory), as well as mes_options.php3 which is included in
ecrire/inc_version.php3Bernard Martin-Rabaud
martinrabo@wanadoo.fr
_______________________________________________
spip-en@rezo.net - http://listes.rezo.net/mailman/listinfo/spip-en
You're write, but I mean that you can't change its name as you like it.
Considering inc_version.php3, sorry, my sentence was ambiguous, there is
just mention of mes_options.php3, with a "if file_exists" condition as
well.
Bernard Martin-Rabaud
martinrabo@wanadoo.fr
-----Message d'origine-----
De : spip-en-bounces@rezo.net [mailto:spip-en-bounces@rezo.net]De la
part de George Kandalaft
Envoye : samedi 24 mai 2003 14:49
A : spip-en@rezo.net
Objet : Re: [Spip-en] HTML filesYou find that in inc-calcul.php3 it is included "if it exists":
if (file_exists("mes_fonctions.php3")) {
include_local ("mes_fonctions.php3");
}as for inc_version.php3, I don't see any mention of it.
George
Bernard Martin-Rabaud wrote:
> But the file mes_fonctions.php3 is included in inc-calcul.php3 (root
> directory), as well as mes_options.php3 which is included in
> ecrire/inc_version.php3
>
> Bernard Martin-Rabaud
> martinrabo@wanadoo.fr
>
>_______________________________________________
spip-en@rezo.net - http://listes.rezo.net/mailman/listinfo/spip-en
_______________________________________________
spip-en@rezo.net - http://listes.rezo.net/mailman/listinfo/spip-en