Unfortunately, quite a few contributed modules also provide fields to add PHP either directly or through import functions.

Modules where I know this is the case are:

- CCK
- Views
- Validator API

These fields/imports should be removed/modified as well.

CommentFileSizeAuthor
#2 php-permissions.patch2.98 KBgábor hojtsy

Comments

sime’s picture

sime
any/any
Location Melbourne
commented

- Webform

gábor hojtsy’s picture

gábor hojtsy
he/him
Primary language Hungarian
Location Hungary
commented
Version: master » 6.x-1.x-dev
Status: Active » Needs review
StatusFileSize
new php-permissions.patch2.98 KB

CCK and webform have permissions for this, so we can just extend the permissions handler and use that to check. Views import does not have a permission, so its gonna be going through a menu alter, not in this patch. Let's get this in first.

gábor hojtsy’s picture

gábor hojtsy
he/him
Primary language Hungarian
Location Hungary
commented

BTW we are running this on drupal.hu at the moment and it works fine.

killes@www.drop.org’s picture

killes@www.drop.org commented
Status: Needs review » Active

Thanks, I've applied this patch. Settings active again since not all known contrib modules are addressed yet.

greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented
Issue summary: View changes
Status: Active » Fixed

I think additional contrib changes should get their own issue. Closing this out as fixed.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.