Entering PHP Code Directly into a Record

Hi, Dave -

I like to build modular sites which my clients can run with even limited experience. CMSB is a great framework for this. However, it would be even better if (in certain situations) instead of inputing data to create a record, the client could simply switch an option on and off. That way, all I'd need to do is set-up the code - whilst all the client would do is activate the option to invoke it.

The way things stand at the moment in order to achieve this I am forced to set-up quite lengthy if/elseif/else statements - each linked to countless included files - to pull in the bite-sized chunks of code I use to construct the different page elements.

Imagine, instead, if it were possible to set up a list in which the values were php includes. You could then prepare a list of options, each one set to pull in a different chunk of code.

The user could then change options on a per-record basis - everything from colours, to what appears in the margins to the entire page layout.

I think it would be an extremely flexible step forward.

:0)

Perch

Hi Perch,

Well if you really want to do it, the way to run PHP code is like this:
<?php echo eval( $record['phpcode'] ); ?>

But I don't recommend that unless you absolutely trust everyone who has access to your CMS because you'll be giving them the ability to run any code on your server.

Another way, would be to have a list of include files and then include them like this:

if ($record['includeFile1']) { include "/includes/" .$record['includeFile1']. ".php"; }

And then you could add a security check to make sure it only contained letters or was in a list of pre-approved files.

So there's a few options. Hope that helps!

Thanks Dave -

And understood. I'll explore a lot further before I go live with this.

:0)

Perch