Javascript and PHP in moodle pages

Javascript and PHP in moodle pages

- Andrew Lian の投稿
返信数: 3

Hello

I understand that it is possible to include javascript in moodle pages produced as resources inside a course.

Instead of using javascript, I would like to include php code. The problem I have noticed is that any php inserted is transformed into a comment.

I know I could embed an external php page by using iframes. However, I want to be able to control access to the php program through the moodle page (something not really possible with an iframe as the external page's URL would be visible in the page's source code).

Any suggestions would be very appreciated.

Thank you.

Andrew

評点平均: -
Andrew Lian への返信

Re: Javascript and PHP in moodle pages

- Weston Dunn の投稿

I would love to see this also.  My application for this would be to include a php query to an external datase of information.

評点平均: -
Weston Dunn への返信

Re: Javascript and PHP in moodle pages

- Tim Hunt の投稿
画像 Core developers 画像 Documentation writers 画像 Particularly helpful Moodlers 画像 Peer reviewers 画像 Plugin developers

This is not possible, it is very unlikely ever to be made possible, because it would be a big security risk. Letting users type in PHP code is an 'execute arbitrary code on the server' vulnerability, which is about as bad as it gets.

If you want to add PHP code to Moodle, then you need to write some sort of Moodle plugin containing the code, and upload it to your server.

Probably the easiest sort of plugin to write to do this is a filter. http://docs.moodle.org/dev/Filters You could make a filter that looks for input like {{{MY CUSTOM REPORT OUTPUT GOES HERE|XYZZY}}} and replaces it with the result of your custom PHP code. The XYZZY is just a suggestion that you might want to add some random string that is required to be in the input, to make it harder for unauthorised users to trigger the filters.

You can also use the http://docs.moodle.org/22/en/Managing_filters system to control where in Moodle this filter is active.

The other sort of thing you could do is to write a block plugin, but that will only work if you want this custom output displayed ot the side of the page.

評点平均: -
Tim Hunt への返信

Re: Javascript and PHP in moodle pages

- Andrew Lian の投稿

Thank you very much for both you answers and apologies for the delay in relpying. Interbet has been broken for several days.

Agreed about the security but there are some CMS systems that allow admins to add php code.

Anyway... the point is that this does not work for moodle. I will have to try other solutions.

Cheers

Andrew

評点平均: -