1 .. include:: ../../Includes.txt
3 =====================================================================
4 Breaking: #88681 - Import of PHP files in Import/Export files removed
5 =====================================================================
12 Importing XML data via `EXT:impexp` previously allowed to import PHP files for Administrators
13 in TYPO3 Backend. This by-pass functionality is removed, and the configured File Deny Pattern
14 now applies for all imports in order to streamline import functionality with other file
15 operations within TYPO3 Core.
21 Importing XML files with embedded PHP files via EXT:impexp will trigger an import error and disallow
22 the import of the file.
25 Affected Installations
26 ======================
28 Any TYPO3 installations using the data importer that use import files with included PHP files.
34 Ensure to include PHP files into a custom local extension, as importing PHP code is highly
35 discouraged - even for administrators.
37 .. index:: PHP-API, NotScanned, ext:impexp