[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

SF.net SVN: ledger-smb: [846] branches/1.2/LedgerSMB/Form.pm



Revision: 846
          http://svn.sourceforge.net/ledger-smb/?rev=846&view=rev
Author:   einhverfr
Date:     2007-03-04 16:53:54 -0800 (Sun, 04 Mar 2007)

Log Message:
-----------
commenting out if expression branch in template parser pending rewrite in 1.3

Modified Paths:
--------------
    branches/1.2/LedgerSMB/Form.pm

Modified: branches/1.2/LedgerSMB/Form.pm
===================================================================
--- branches/1.2/LedgerSMB/Form.pm	2007-03-04 23:05:24 UTC (rev 845)
+++ branches/1.2/LedgerSMB/Form.pm	2007-03-05 00:53:54 UTC (rev 846)
@@ -760,15 +760,18 @@
 			chop;
 			s/.*?<\?lsmb if (.+?) \?>/$1/;
 
-			if (/\s/) {
-				@args = split;
-				if ($args[1] !~ /^(==|eq|>|gt|>|lt|>=|ge|le|<=|ne|!=)$/){
-					$self->error("Unknown/forbidden operator");
-				}
-				$ok = eval "$self->{$args[0]} $args[1] $args[2]";
-			} else {
+			# commenting this out for security reasons.  If needed,
+			# please uncomment.  Functionality below will be in 1.3
+			# Chris Travers
+			#if (/\s/) {
+			#	@args = split;
+			#	if ($args[1] !~ /^(==|eq|>|gt|>|lt|>=|ge|le|<=|ne|!=)$/){
+			#		$self->error("Unknown/forbidden operator");
+			#	}
+			#	$ok = eval "$self->{$args[0]} $args[1] $args[2]";
+			#} else {
 				$ok = $self->{$_};
-			}
+			#}
 
 			if ($ok) {
 				while ($_ = shift) {


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.