MyBB Community Forums

Full Version: Page Manager: Disallowing PHP
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hello,
So I downloaded and installed the Page Manager Plugin, http://mods.mybb.com/view/page-manager, and I was wondering how to remove PHP support. I have this installed on my forum host and it's too much of a security risk to allow users access to PHP, especially inside of MyBB where they can probably drop/add database tables from other boards besides their own, modify another board's data, etc. It's a fantastic plugin which I want users to have access too, but I just don't want them executing PHP.

I'm completely clueless when it comes to MyBB plugin development so I'm not sure how I can "strip" PHP code from the web form.

Thanks!
Creating PHP powered pages within MyBB was my intention when I started the development of this plugin. You want to remove the main feature of this this plugin...
It's a wonderful plugin - it allows users to create pages without needing FTP access or a separate hosting account. However, I'm running a multi-forum environment and the last thing I need are users accessing (restricted) information that could cripple ALL hosted users. No user on my service has the right to access another board's information. Unless the PHP is sanitized in some way to disallow this, it's safer to stick with just HTML, CSS, and Javascript. I don't want to wake up one morning to find that Forum A used this to hack Forum F but I want the functionality of users to have pages that they have freedoms with.
Yes I get it. This will disable PHP support: http://community.mybb.com/thread-63082-p...#pid454206
Thanks, much appreciated.