how to allow users to submit articles for approval?

[signal15]

Is there a way to allow the users of my site to submit articles, but have them remain inactive until an admin or moderator goes in and activates it?

I'm using the article functionality as a Knowledgebase, and this would be a very powerful option to have.

Maybe it's there now.  I saw the permissions for who can post articles, but I haven't tried it yet, because it appears it makes no distinction between what type of article they can post.  I do not want to give users the ability to post PHP articles and potentially execute evil PHP code on my server.

[IchBin]

There's no way to moderate whether its a php submissions or not. But you can assign who gets to approve articles in the submissions by changing that permission in the actual membergroup of SMF itself.

[signal15]

I don't see a way for users to Preview the article they are submitting.  Am I right to assume they cannot preview it?

The reason I ask is because if they put PHP code into it, and previewed it, it would execute the code on my server.

Also, if they can submit PHP code, that means that if I go in and preview the submission before approving it, I could potentially run some evil code that was inserted into the article.

Can users actually insert PHP code when submitting an article?

[IchBin]

The code will not be viewable until the article is approved. The PHP articles don't use the editor though. So no preview for them. If they want to preview a PHP file they'll have to create it somewhere else to view it, then include it in the article.

[Thurnok]

Additionally, when you go to look at the Article via the Article Manager, you won't be in a 'preview' mode either.  You will be simply looking at php source code.  So you could copy it from the article editbox to your favorite php editor and look through the code to see what it is doing before you decide to approve the Article or not.