hi folks,
I am intending to support numerous sites on one server however the fact that users can add php code into snippets causes me some concern.
Is this code filtered for nasty code and if not should I write some plugin to handle it?
How is everyone else with multiple sites on one server handling this issue?
(yes I did try searching for this question on the forums)
thnx
TiM
-
☆ A M B ☆
- 24,524 Posts
That all depends. You can prevent users of your sites from creating or editing snippets; that’s what I do with the sites I’m hosting on my server. I create users for the sites with limited capabilities. If I were really concerned, I would go so far as to hack the core TV files to disable @EVAL and @SELECT TV bindings.
On the other hand, if your server is configured correctly, what a user does on one site will only affect that site; neither he nor any scripts he runs will be able to access anything more than his assigned web space or his assigned database.
