Smarty

[mastab0323]

I have a centralized CMS software where a client can login and manage their content, including altering their website templates and creating their own styles for this CMS software. They do not have access to any of the php code, but only the software, and we allow them to style the software as they please using the smarty template engine, and the smarty template files are placed into their own personal directory and loaded once they log in. I dont want them to have the ability to alter any of the files or php code.

Couldnt they do this

{php}
`rm index.php`
{/php}

or something along those lines?

How do I keep them from doing this and keep my code and my files secure?

Thanks for your help.

[boots]