wp_all_import_is_php_allowed

[trey8611]

Description: disables Function Editor and disables all PHP functions in import template. Must be placed in functions.php file.

Since: WP All Import Pro 4.5.6 Beta 4.2

add_filter('wp_all_import_is_php_allowed', 'wpai_wp_all_import_is_php_allowed', 10, 1);
function wpai_wp_all_import_is_php_allowed($is_php_allowed) {
    return FALSE;
}

[joeguilmette]

Hey this is a good idea, may come in handy for client mode.

[joeguilmette]

But, it's likely that if the user is allowed to upload an import file then it will still be pretty easy to pull off a SQL injection hack or something similar to allow for arbitrary code execution. Only trusted users should have access to WPAI.

We should include a notice stating this in the documentation for this filter.