update if statement security feature

This commit is contained in:
mohrt
2001-06-15 13:52:52 +00:00
parent a3ac875225
commit 282d2e5e42
3 changed files with 16 additions and 6 deletions
+6
View File
@@ -485,6 +485,12 @@ class Smarty_Compiler extends Smarty {
$is_arg_stack = array();
for ($i = 0; $i < count($tokens); $i++) {
if($this->security && $tokens[$i+1] == '(' && !in_array($tokens[$i],$this->security_settings["ALLOW_IF_FUNCS"])) {
$this->_syntax_error("(secure mode) '".$tokens[$i]."' not allowed in if statement");
}
$token = &$tokens[$i];
switch ($token) {
case 'eq':