Warning: raw_php_deprecated
ANSWER:
As of Textpattern 4.0.4, “raw” PHP tags (like <?php ... ?>) are officially deprecated for security reasons1. You should use Textpattern’s built-in <txp:php> ... </txp:php> tags instead. Code in raw PHP tags can still be used, but Textpattern will always display a warning message when in Testing or Debug mode.
On fresh installations, raw PHP is disabled by default. You can turn it on via the allow_raw_php_scripting setting in Advanced Preferences.
On sites that have been upgraded from previous versions of Textpattern, allow_raw_php_scripting is enabled by default. We recommend you disable it, and use Textpattern’s PHP tags instead.
1 There are no known issues that could allow a remote attacker to execute or compromise PHP code. PHP code can only be inserted or modified by authorized Textpattern administration users. The security problem is that it’s not possible to have fine-grained permission control over code in <?php ... ?> tags. <txp:php> ... </txp:php> tags, on the other hand, can be enabled and disabled separately for different user levels and in different contexts (template or article).
