[!!!][TASK] Remove import of PHP files of admins from impexp
[Packages/TYPO3.CMS.git] / typo3 / sysext / core / Documentation / Changelog / master / Breaking-88681-ImportOfPHPFilesInImportExportFilesRemoved.rst
1 .. include:: ../../Includes.txt
2
3 =====================================================================
4 Breaking: #88681 - Import of PHP files in Import/Export files removed
5 =====================================================================
6
7 See :issue:`88681`
8
9 Description
10 ===========
11
12 Importing XML data via `EXT:impexp` previously allowed to import PHP files for Administrators
13 in TYPO3 Backend. This by-pass functionality is removed, and the configured File Deny Pattern
14 now applies for all imports in order to streamline import functionality with other file
15 operations within TYPO3 Core.
16
17
18 Impact
19 ======
20
21 Importing XML files with embedded PHP files via EXT:impexp will trigger an import error and disallow
22 the import of the file.
23
24
25 Affected Installations
26 ======================
27
28 Any TYPO3 installations using the data importer that use import files with included PHP files.
29
30
31 Migration
32 =========
33
34 Ensure to include PHP files into a custom local extension, as importing PHP code is highly
35 discouraged - even for administrators.
36
37 .. index:: PHP-API, NotScanned, ext:impexp