typo3/sysext/core/Documentation/Changelog/master/Breaking-88681-ImportOfPHPFilesInImportExportFilesRemoved.rst

   1 .. include:: ../../Includes.txt
   2
   3 =====================================================================
   4 Breaking: #88681 - Import of PHP files in Import/Export files removed
   5 =====================================================================
   6
   7 See :issue:`88681`
   8
   9 Description
  10 ===========
  11
  12 Importing XML data via `EXT:impexp` previously allowed to import PHP files for Administrators
  13 in TYPO3 Backend. This by-pass functionality is removed, and the configured File Deny Pattern
  14 now applies for all imports in order to streamline import functionality with other file
  15 operations within TYPO3 Core.
  16
  17
  18 Impact
  19 ======
  20
  21 Importing XML files with embedded PHP files via EXT:impexp will trigger an import error and disallow
  22 the import of the file.
  23
  24
  25 Affected Installations
  26 ======================
  27
  28 Any TYPO3 installations using the data importer that use import files with included PHP files.
  29
  30
  31 Migration
  32 =========
  33
  34 Ensure to include PHP files into a custom local extension, as importing PHP code is highly
  35 discouraged - even for administrators.
  36
  37 .. index:: PHP-API, NotScanned, ext:impexp