We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
MODX Community Forums Archive

[SOLVED] Using MODx Chunks (and placeholders from Wordpress)

    • 7253
    • 97 Posts
    dflock Reply #11, 16 years, 5 months ago
    Cool - glad you like it smiley

    I’m away from home at the moment, so you just got the version of this that happened to be on my laptop. I’ll merge these changes in to my main development version when I get back and upload a combined version Tuesday or Wednesday.

    As this is a Wordpress add-on, I guess I should put this into the wordpress.org add-ins repository, so people can install it straight from the WP manager? It could go in the MODx extras repository too. It could do with a WP manager control panel to configure it too. Maybe I’ll just release this version for now and get to that later, rather than putting it off, again.

    I’ve got a nagging feeling that this add-on is pretty brain-dead and that it’s either a terrible idea (security wise, maybe??) or that there must be a much better way to do it? Not sure why I feel like this, but if someone else could have a look and reassure me, that would be good smiley

    Thanks for the fixes, btw!
      Codeistry - custom website development & consultancy in Vancouver - experienced MODx developer for hire.
      • 27708 MODX Staff
      • 2,502 Posts
      Jay Gilmore Reply #12, 16 years, 5 months ago
      Duncan,

      I don’t think it is vastly insecure since it is only reading and parsing. I could be wrong and I’d love someone who understands more about security in applications to take a look at this too.

      I also decided to change the part where I hardcoded the blog title in the modx_init.php and am now using the following:
      <?php // for formatting
    $modx->documentObject['pagetitle'] = get_bloginfo('name'); //This grabs the WP blog title
        Author of zero books. Formerly of many strange things. Pairs well with meats. Conversations are magical experiences. He's dangerous around code but a markup magician. Blog ✦ Twitter ✦ LinkedIn ✦ GitHub
        • 8542
        • 37 Posts
        eFragPulse Reply #13, 16 years, 5 months ago
        I took a quick look at it. smashing is correct, there isn’t much of a security problem there. The only thing I would ever say is to never do such a thing cross-domain or cross-server, obviously without SSL.

        Otherwise this is a great addon and it seems like it will help alot of other people out.

        Also, it doesn’t actually pull any DB info directly or anything, and uses native modx functions. I think you will be just fine laugh