Article Security

[MongooseKY]

I run a TP 0.9.8/SMF 1.1.3 site for my WoW guild and I'm concerned with the functionality of PHP articles.  I'd like to allow guild officers to create and approve articles, but when I grant the permission for the officers group to manage articles, it also gives them the ability to convert them to PHP.  Is there any way to allow article management without the security implications of PHP articles?  Is there a way to restrict PHP articles by membergroup or disable them altogether?

[G6Cad]

At this stage there is no option like that, but even with PHP articles and PHP blocks the security should be very tight as the files goes and uses the SMF files. Ad both SMF and TP have a very high security level set before any releases and the developers from both SMF and TP never releases anything if it's not checked, rechecked and tested through a lot of tests.

[MongooseKY]

How limited are PHP articles though?  Can a PHP article do anything that the php configuration of the server allows?  That was my concern - essentially giving the ability to create full-powered PHP code from within the article interface.

What restrictions are placed on the evaluation of PHP code in articles?

[Ianedres]

I believe the PHP code is unrestricted within TP/SMF. That is beneficial while troublesome at the same time.

As an alternative, look at FelBlog (http://feline-networks.com) that may allow your members to post through blogs instead of articles. I have just installed it this evening and was very impressed with the functionality it provides.