Blacklisted/Whitelisted PHP for Calculated Merge Fields

Overview

The Calculated Merge Fields in Actionstep allow you to write in PHP code to create your own merge fields. Not all PHP functions are available to be used. There is a blacklist of some functions which are not allowed due to security concerns and a whitelist of functions which we do allow.

If you try to use a PHP function that is on the blacklist in a Calculated Merge Field it will give you a message saying that that function is not allowed.

There will be functions which are not included on either list. If you use one of these functions you will get a message saying that the function is not supported. In that situation reach out to our support staff by emailing [e-mail] and ask if the function can be allowed. If you include a copy of the calculated merge field you are trying to create that will help our programmers decided if the function should be whitelisted or blacklisted. If it is blacklisted they can often suggest an alternative function you could use.

Allowed Constants

• SORT_ASC
• SORT_DESC
• SORT_REGULAR
• SORT_NUMERIC
• SORT_STRING
• SORT_LOCALE_STRING
• SORT_NATURAL
• SORT_FLAG_CASE

Allowed Functions

count array_key_exists array_multisort in_array sizeof intval round strval floatval strftime date_add date_create_from_format date_create_immutable_from_format date_create_immutable date_create date_date_Set date_diff date_format date_interval_create_from_date_string date_interval_format date_isodate_set date_modify date_offset_get date_parse_from_format date_parse date_sub date_sun_info date_sunrise datesunset date_time_set date_timestamp_get date_timestamp_set date_timezone_get date_timezone_set

print_r mktime strtotime strptime getdate localtime date gmdate gmmktime gmstrftime time number_format strtolower strtoupper ucwords ucfirst substr explode implode echo lcfirst ltrim print printf rtrim sprintf sscanf

str_ireplace str_pad str_word_count strcasecmp strcmp strip_tags stripcslashes stripos stripslashes stristr strlen strncmp strnbrk strpos strrchr strrev strripos strrpos strspn strstr strtr trim vfprintf vsprintf wordwrap

Disallowed Functions

• exec
• passthru
• system
• shell_exec
• popen
• proc_open
• pcntrl_exec
• eval
• assert
• preg_replace
• create_function
• include
• include_once
• require
• require_once
• phpinfo

Related articles

• Calculated Merge Fields
• Update of Merge Fields
• Repeating Blocks of Text
• Common Merge Fields