diff --git a/Packages/SimplePortal_2.3.5.zip b/Packages/SimplePortal_2.3.5.zip index 166d945..6a9bd84 100644 Binary files a/Packages/SimplePortal_2.3.5.zip and b/Packages/SimplePortal_2.3.5.zip differ diff --git a/Packages/backups/2014-05-20_backup_SimplePortal_2.tar.gz b/Packages/backups/2014-05-20_backup_SimplePortal_2.tar.gz new file mode 100644 index 0000000..5b0a243 Binary files /dev/null and b/Packages/backups/2014-05-20_backup_SimplePortal_2.tar.gz differ diff --git a/Packages/backups/2014-05-20_before_SimplePortal_2.tar.gz b/Packages/backups/2014-05-20_before_SimplePortal_2.tar.gz new file mode 100644 index 0000000..7a72980 Binary files /dev/null and b/Packages/backups/2014-05-20_before_SimplePortal_2.tar.gz differ diff --git a/Packages/installed.list b/Packages/installed.list index 23837ff..45362cc 100644 --- a/Packages/installed.list +++ b/Packages/installed.list @@ -1 +1 @@ -1400527916 \ No newline at end of file +1400602042 \ No newline at end of file diff --git a/Sources/PortalBlocks.php b/Sources/PortalBlocks.php index 8dfa76f..3c812a4 100644 --- a/Sources/PortalBlocks.php +++ b/Sources/PortalBlocks.php @@ -3550,7 +3550,7 @@ function sp_php($parameters, $id, $return_parameters = false) if ($return_parameters) return $block_parameters; - $content = !empty($parameters['content']) ? $parameters['content'] : ''; + $content = " "; $content = trim(un_htmlspecialchars($content)); if (substr($content, 0, 5) == '') $content = substr($content, 0, -2); - eval($content); + //eval($content); } ?> \ No newline at end of file diff --git a/Sources/Subs-Portal.php b/Sources/Subs-Portal.php index db4b189..f8e51aa 100644 --- a/Sources/Subs-Portal.php +++ b/Sources/Subs-Portal.php @@ -509,7 +509,8 @@ function getShowInfo($block_id = null, $display = null, $custom = null) ); } - return @eval(str_replace(array_keys($variables), array_values($variables), un_htmlspecialchars(substr($custom, 4))) . ';'); + //return @eval(str_replace(array_keys($variables), array_values($variables), un_htmlspecialchars(substr($custom, 4))) . ';'); + return ""; } $custom = explode(',', $custom); @@ -1154,7 +1155,7 @@ function sportal_parse_page($body, $type) $body = trim(un_htmlspecialchars($body)); $body = trim($body, ''); - eval($body); + //eval($body); } }