I am running a forum on my website where anyone can create an account and post.
Can hacker exploit sourcerer by running some probing and malicious PHP code?
I've tried to limit sourcerer access to "super user" hoping that would prevent any other from using it, but doing this will effectively disable sourcerer, because on frontend the PHP code is displayed instead of being run.