If you know how to script in PHP, Drupal gives you the power to embed any script you like. It will be executed when the page is viewed and dynamically embedded into the page. This gives you amazing flexibility and power, but of course with that comes danger and insecurity if you don\'t write good code. If you are not familiar with PHP, SQL or with the site engine, avoid experimenting with PHP because you can corrupt your database or render your site insecure or even unusable! If you don\'t plan to do fancy stuff with your content then you\'re probably better off with straight HTML.
-Remember that the code within each PHP item must be valid PHP code - including things like correctly terminating statements with a semicolon. It is highly recommended that you develop your code separately using a simple test script on top of a test database before migrating to your production environment.
-Notes:
print or return statement to output the actual content for your item.A basic example:
--You want to have a box with the title "Welcome" that you use to greet your visitors. The content for this box could be created by going:
-- print t("Welcome visitor, ... welcome message goes here ..."); --If we are however dealing with a registered user, we can customize the message by using:
-- global $user; - if ($user->uid) { - print t("Welcome $user->name, ... welcome message goes here ..."); - } - else { - print t("Welcome visitor, ... welcome message goes here ..."); - } -
For more in-depth examples, we recommend that you check the existing Drupal code and use it as a starting point, especially for sidebar boxes.
'); - } - - case 2: - switch ($long) { - case 0: return t('Lines and paragraphs break automatically.'); case 1: return t('Lines and paragraphs are automatically recognized. The <br /> line break, <p> paragraph and </p> close paragraph tags are inserted automatically. If paragraphs are not recognized simply add a couple blank lines.'); @@ -911,18 +883,13 @@ function theme_filter_tips($tips, $long function filter_filter($op, $delta = 0, $format = -1, $text = '') { switch ($op) { case 'list': - return array(0 => t('HTML filter'), 1 => t('PHP evaluator'), 2 => t('Line break converter')); - - case 'no cache': - return $delta == 1; // No caching for the PHP evaluator. + return array(0 => t('HTML filter'), 1 => t('Line break converter')); case 'description': switch ($delta) { case 0: return t('Allows you to restrict if users can post HTML and which tags to filter out.'); case 1: - return t('Runs a piece of PHP code. The usage of this filter should be restricted to administrators only!'); - case 2: return t('Converts line breaks into HTML (i.e. <br> and <p> tags).'); default: return; @@ -933,8 +900,6 @@ function filter_filter($op, $delta = 0, case 0: return _filter_html($text, $format); case 1: - return drupal_eval($text); - case 2: return _filter_autop($text); default: return $text; --- /home/ber/repositories/drupal/current/modules/php_input.module 1970-01-01 01:00:00.000000000 +0100 +++ modules/php_input.module 2006-01-24 14:05:23.000000000 +0100 @@ -0,0 +1,85 @@ +Using custom PHP code +If you know how to script in PHP, Drupal gives you the power to embed any script you like. It will be executed when the page is viewed and dynamically embedded into the page. This gives you amazing flexibility and power, but of course with that comes danger and insecurity if you don\'t write good code. If you are not familiar with PHP, SQL or with the site engine, avoid experimenting with PHP because you can corrupt your database or render your site insecure or even unusable! If you don\'t plan to do fancy stuff with your content then you\'re probably better off with straight HTML.
+Remember that the code within each PHP item must be valid PHP code - including things like correctly terminating statements with a semicolon. It is highly recommended that you develop your code separately using a simple test script on top of a test database before migrating to your production environment.
+Notes:
print or return statement to output the actual content for your item.A basic example:
++You want to have a box with the title "Welcome" that you use to greet your visitors. The content for this box could be created by going:
++print t("Welcome visitor, ... welcome message goes here ..."); ++If we are however dealing with a registered user, we can customize the message by using:
++global $user; +if ($user->uid) { + print t("Welcome $user->name, ... welcome message goes here ..."); +} +else { + print t("Welcome visitor, ... welcome message goes here ..."); +} +
For more in-depth examples, we recommend that you check the existing Drupal code and use it as a starting point, especially for sidebar boxes.
'); + } + } +} + +/** + * Implementation of hook_perm(). + */ +function php_input_perm() { + return array('run PHP (be carefull)'); +} + +/** + * Implementation of hook_filter(). Contains a basic PHP evaluator. + * Executes PHP code. Use with care. + */ +function php_input_filter($op, $delta = 0, $format = -1, $text = '') { + switch ($op) { + case 'list': + return array(0 => t('PHP evaluator')); + case 'no cache': + return $delta == 0; // No caching for the PHP evaluator. + case 'description': + if ($delta == 0) { + return t('Runs a piece of PHP code. The usage of this filter should be restricted to administrators only!'); + } + case 'process': + if ($delta == 0) { + return drupal_eval($text); + else { + return $text; + } + default: + return $text; + } +}