[ic] [area] or [page] problems
Jon Jensen
jon at endpoint.com
Tue Apr 13 14:26:17 EDT 2004
On Tue, 13 Apr 2004, Christopher Wenham wrote:
> On Tuesday 13 April 2004 13:11, Jeannie Stevenson wrote:
> > I'm having trouble, I have data in postgres SQL database, the products
> > table contains data which include a hyperlink to another page. I've tried
> > [page bonus]bonus programs[/page] and I've tried <A href="[area
> > bonus]">bonus programs</A> and other variations according to the docs but I
> > haven't been able to get this hyperlink to work out of a database.
>
> You either need to hard-code the URL in the data, or make Interchange
> interpolate it before displaying it. For security reasons, Interchange won't
> interpolate anything coming out of a database, even if you pass
> interpolate="1" to the [data] tag.
You can allow Interchange tags to be output unescaped with the safe_data=1
flag to [data]. Be warned, though, that if someone manages to sneak some
Interchange code into your database, you've got yourself a security
problem when it's retrieved and executed. That's why the default is
safe_data=0.
Jon
More information about the interchange-users
mailing list