[eluser]Unknown[/eluser]
Hi there,
I'm new to CodeIgniter and noticed that the templates include php code, which is great, since they work faster and make it easier to deal with them.
But, is it possible to somehow restrict the functionality of the php that is run on a template?
I hire artists to do the interface work in my projects, and I give them access to the templates directory so they can upload files and test them easily. But if those templates are php templates then they could also execute code that could compromise the security (or even steal the data, or the sources). I guess the simplest solution is to use a template engine, but I love the fact that the template can include php code, is just I'd like it to be restricted to certain functions only. I'm not sure if thats possible at all, and in case its not, which kind of security measures do you take?
Thanks in advance
