Jump to content



Recommended Posts

Im creating a CMS system to run multiple websites.


The content and templates are all stored in a mysql database and the only use of files is for the php code/classes that generates the pages.


The problem I have is some of the pages generated from the CMS must allow for dynamic output hence I will need the use of PHP.


I know eval() can execute data e.g straight from a mysql database but that would pretty much allow a user to have some serious access to the system.


Can anyone think of a better solution? It would be good if I could use eval() alongside some good security limitations that stopped them from using certain functions related to reading files / delete functions.

Link to comment
Share on other sites

Your not exactly describing your issue very well, but it sounds to me like your design is floored somewhere.


I have a CMS that runs multiple (currently almost 300) web sites. Know where within this system do I need to store php within a database or allow clients to edit any php.

Link to comment
Share on other sites

This thread is more than a year old.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.