From: Jason R. <ja...@ho...> - 2009-07-22 16:56:26
|
first let me say this is very bad and you are going to have to be EXTREMELY security focussed with that setup. but here is a slow, painful hack that will be easy to implement: 1) fetch html/php string from DB (is it stored with slashes, escape entities, etc?). 2) write string to tempfile 3) call include on tempfile slow and ugly but easy to implement Andy Carlson wrote: > Here's the situation. I'm designing a database based page generation system > for my website. That is, HTML and possibly PHP code is stored in a MySQL > table as raw text. A query will pull the text out of the table and render > it as HTML and PHP. It renders the HTML, but it won't render the PHP Code > (it appears in my source code when I "view source" in my browser). > > I have tried the "eval()" command, but that doesn't seem to work. Any > thoughts? Thanks much, > > Andy Carlson > Carlson Technology > --------------------------------------------------- > "Man's conquest of Nature turns out, in the moment of its consummation, to > be Nature's conquest of Man." -- C.S. Lewis > --------------------------------------------------- > "The ubiquity of the Internet is more important than the technology of the > Internet" -- Jeff Bezos > ------------------------------------------------------------------------------ > _______________________________________________ > chiPHPug-discuss mailing list > chi...@li... > https://lists.sourceforge.net/lists/listinfo/chiphpug-discuss |