[ic] [area] or [page] problems

Jon Jensen jon at endpoint.com
Tue Apr 13 14:26:17 EDT 2004


On Tue, 13 Apr 2004, Christopher Wenham wrote:

> On Tuesday 13 April 2004 13:11, Jeannie Stevenson wrote:
> > I'm having trouble, I have data in postgres SQL database, the products
> > table contains data which include a hyperlink to another page. I've tried
> > [page bonus]bonus programs[/page] and I've tried <A href="[area
> > bonus]">bonus programs</A> and other variations according to the docs but I
> > haven't been able to get this hyperlink to work out of a database.
> 
>  You either need to hard-code the URL in the data, or make Interchange 
> interpolate it before displaying it. For security reasons, Interchange won't 
> interpolate anything coming out of a database, even if you pass 
> interpolate="1" to the [data] tag.

You can allow Interchange tags to be output unescaped with the safe_data=1 
flag to [data]. Be warned, though, that if someone manages to sneak some 
Interchange code into your database, you've got yourself a security 
problem when it's retrieved and executed. That's why the default is 
safe_data=0.

Jon


More information about the interchange-users mailing list