Is there a better way to get a uid in a block than using Input Format PHP? I need to make a direct link to page which needs the uid in the URL. 

Can someone suggest a better way to do this in a block? Does Input Format PHP code open some unnecessary attack vectors? Are input filters or tokens in blocks possible?

&lt;?php 
global $user; 
?&gt;   
.
.
.
&lt;li&gt;
   &lt;a href="/user/&lt;?php echo $user-&gt;uid ?&gt;/fboauth?destination=stream"&gt;Facebook Deauthorize&lt;/a&gt;
&lt;/li&gt;


This is a legacy site running 6.28 using FBOauth.
You should be creating your own block module for blocks that require custom PHP, custom PHP inside a form field is not very good security wise because of the way the PHP is parsed.

A custom block meaning

custom_hook_block() with the $block['content'] =&gt;