[TYPO3-core] RFC: Check required ?

Bernhard Kraft kraftb at kraftb.at
Sat May 6 02:11:44 CEST 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,


I was just making a site and wanted to output contents of "sys_domain" records using a CONTENT
object when I had to find this line in tslib/class.tslib_content.php line 1153 :


if ($conf['table']=='pages' || substr($conf['table'],0,3)=='tt_' || substr($conf['table'],0,3)=='fe_' || substr($conf['table'],0,3)=='tx_' || substr($conf['table'],0,4)=='ttx_' || substr($conf['table'],0,5)=='user_')   {


So now I'm wondering what this is for ... I mean TS can only get inserted by admin. And admins should know wheter
they want to display contents of a table or not.

So is there any obvious reason for this check ? Pherhaps other security issues I can't think of ....

If not I would like to remove it ....


greets,
Bernhard
- --
- ----------------------------------------------------------------------
"Freiheit ist immer auch die Freiheit des Andersdenkenden"
Rosa Luxemburg, 1871 - 1919
- ----------------------------------------------------------------------
[[ http://think-open.at | Open source company ]]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFEW+nAIl4dkVkDMFkRAsTEAKC22TkeflBz55Cz9cI8tzFy63CcUwCeNk+e
bhkJVWBpF7P6ZDxPVirHLH8=
=J/LM
-----END PGP SIGNATURE-----



More information about the TYPO3-team-core mailing list