Smarty

Aristophan · Smarty Regular Joined: 10 Jan 2011 Posts: 96

The error SmartyException("{include_php} is deprecated, use SmartyBC class to enable"); in smarty_internal_compile_include_php.php, tells to use the SmartyBC class, but is that maybe missing in there?

U.Tews · Posted: Thu Dec 22, 2011 4:42 pm Post subject:

Just include the SmartyBC.class.pnp file and create the $smarty instance using SmartyBC.

$smarty = new SmartyBC()

Aristophan · Smarty Regular Joined: 10 Jan 2011 Posts: 96

Is it that easy?
I am sorry digging into, without me knowing if I ever will use it personally, but...
Which method or property in SmartyBC() takes care about it? None, as I can see in include_php.php. It just asks, if BC instance exists.
But if anybody needs to clone this part only, partitially per demand, the one has no other possibility else to generally extend SmartyBC(). Couldn't this be done better?

U.Tews · Posted: Thu Dec 22, 2011 5:42 pm Post subject:

The better solution is not to use {include_php} at all but write a funtion plugin instead.

{include_php} does open doors for code injection.