Security Mod

[TigerC10]

You should never have scripts write to other scripts. Ever (well, at least not in a live environment - but meta-scripts for writing other scripts is fine in a dev environment).

I can see a practical application for this in writing to a directory for custom avatars or attachments, as opposed to keeping the data in the database. But not to other scripts. Even if you did just do it for upload directories, I can't see the reason behind it - the worst case scenario is that someone uploads a virus instead of what you expect and your server should have a decent antivirus on it.

But storing all of your scripts in memory like that... Very server intensive. Not exactly a good idea unless you're running a small board (which, I guess, most people do), or if you're running your board on a dedicated server where no one will complain about over-use.