I have selected Zen-Cart in favor of "portal type CMS codes" to build a "non-cart" web site for a shop (adding the cart bit would come for free later on).

Obviously the ez-pages are great for adding content, so are the define-pages (which lets users drop contributions via ftp without having zc admin access).

Another way I plan to use ZC for content, is to include output from other php-scrips.

Ways I see to include output from the scripts include:

(i) Make the ez-pages execute php
(ii) Include the php in the define pages
(iii) Use iframes on the ez-pages to load content from the scripts

I have read security concerns about (i) and (ii), but what about (iii)?

Any "safe" way to use (i) or (ii)?

All input appreciated.