Prohibit access to get_instance() from a view

Hi there,

I’m having a small issue with Codeigniter.
I would like to prohibit access to CI and the get_instance() from a view.

In other words, it should not be possible to access get_instance from a view.

Can anyone help me out here?


Thanks, best regards,

Rolf

Why? Are you afraid a developer is going to use it in a view?

https://www.codeigniter.com/user_guide/g..._apps.html

https://www.codeigniter.com/user_guide/g..._apps.html

I'm feeling really dumb because I don't understand how that relates to the OP's question.

Not possible.

@rolf

If you find a way to abandon using/parsing PHP for views, then it would be possible.

Why? Are you afraid a developer is going to use it in a view?

That's the main reason for it indeed. We're working with developers we don't personally know and it's just too easy to print the database password right now. I've already solved the issue by implementing a template engine.

However, for security reasons it would be very recommendable if a new version of CI would have the option to prohibit accessing get_instance from views.

Not possible.

I agree. Even when creating an extension for get_instance(), it's still not possible to determine whether a call was being made from the view or from the controller.

@rolf

If you find a way to abandon using/parsing PHP for views, then it would be possible.

Thanks. Yes, I decided to implement Twig in order to solve this issue. But it would have been much easier if this would be a default setting in a new CI version. It's really unsafe right now and doesn't fit into the MVC logic anyway...

Thanks for all of your replies 

Not possible.

I agree. Even when creating an extension for get_instance(), it's still not possible to determine whether a call was being made from the view or from the controller.

It is possible to detect where the call originated from. You can't make an extension of get_instance().