Quote:
Originally Posted by Andreas
First of all:
Never use strings from user input in output directly -> Cross Site Scripting.
What's in the twmplate (vbcms_content_phpeval_page) you are trying to output?
It needs to be smth. like
Code:
Player Name: {vb:raw medalStatsSearchVars.medal_search_player}
|
Thanks for your answer. I'm not using the user input directly and that template is a default vB4 template used for dynamic PHP content. I had no intention to change said template but I guess I might have to create a new one based on it.
To make this situation more clear: I created a new article and selected dynamic PHP content which uses said template, then I pasted my PHP code into that article and that's where I want to use the variables. The code format that you posted is only usable in a HTML template if I'm not mistaken?