Aryeh Gregor wrote:
On Sat, Jan 31, 2009 at 8:03 AM, Domas Mituzas midom.lists@gmail.com wrote:
[ ] - Implement proper scripting engine like Lua for metatemplates (http://pecl.php.net/package/lua
- another can of worms, though yet again, can be managed via trusted
set of people, on top20 wikis or so).
This seems like it's the only solution from your list that would be generally applicable to similar future scenarios. I don't think the users would have to be particularly trusted -- just make sure that the runtime of the programs is limited, and that it's properly sandboxed (is the Lua PECL extension sandboxed?).
That would be like adding a dependancy on Lua extension for reusers, as the core templates will be implemented in Lua. And I don't think worth reimplementing a Lua interpreter in php...