I finding a php template engine allow user defined function only or it allow white-list functions only. My problem is I will let my user edit their templates. So I need a safe template engine.
The twig project ( http://www.twig-project.org/ ) has a sandbox mode.
Rain implements the sandbox with black_list, if you ask they might add the white list as well http://www.raintpl.com/
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With