Smarty

[Grisword]

In the manual Smarty-2.5.0-docs.pdf, i found this :

[messju]

for example: your templates are readable by a webbrowser. someone can download them and look for programming errors, or for stuff like {if $admin}...{/if} that he shouldn't know about.

your templates_c-folder contains php-files that a either readable by the webbrowser or executed out of context by the webserver (depending on smarty-version and webserver-settings). the former suffers from the same problems as the tpl-files above the latter, though unlikely, can lead to nasty unintended side-effects.

these two are just a starter. people can get really creative when it comes to misusing/exploiting computers (seems to be some strange anomaly of darwinism )

[Grisword]

thanks!
this was exactly what i was looking for.