kas5986
diff --git a/Collapse file
‎phpBB/includes/template/renderer_eval.php‎
Copy file name to clipboardExpand all lines: phpBB/includes/template/renderer_eval.php
+1-1Lines changed: 1 addition & 1 deletion b/Collapse file
‎phpBB/includes/template/renderer_eval.php‎
Copy file name to clipboardExpand all lines: phpBB/includes/template/renderer_eval.php
+1-1Lines changed: 1 addition & 1 deletion
diff --git a/Collapse file
‎tests/template/renderer_eval_test.php‎
Copy file name to clipboard
+31Lines changed: 31 additions & 0 deletions b/Collapse file
‎tests/template/renderer_eval_test.php‎
Copy file name to clipboard
+31Lines changed: 31 additions & 0 deletions
@@ -55,6 +55,6 @@ public function render($context, $lang)
 		$_rootref = &$context->get_root_ref();
 		$_lang = $lang;
 
-		eval($this->code);
+		eval(' ?>' . $this->code . '<?php ');
 	}
 }
@@ -0,0 +1,31 @@
+<?php
+/**
+*
+* @package testing
+* @copyright (c) 2011 phpBB Group
+* @license http://opensource.org/licenses/gpl-license.php GNU Public License
+*
+*/
+
+class phpbb_template_renderer_eval_test extends phpbb_test_case
+{
+	public function test_eval()
+	{
+		$compiled_code = '<a href="<?php echo \'Test\'; ?>">';
+		$valid_code = '<a href="Test">';
+		$context = new phpbb_template_context();
+		$template = new phpbb_template_renderer_eval($compiled_code, NULL);
+		ob_start();
+		try
+		{
+			$template->render($context, array());
+		}
+		catch (Exception $exception)
+		{
+			ob_end_clean();
+			throw $exception;
+		}
+		$output = ob_get_clean();
+		$this->assertEquals($valid_code, $output);
+	}
+}
Original file line number	Diff line number	Diff line change
`@@ -55,6 +55,6 @@ public function render($context, $lang)`
`55`	`55`	`$_rootref = &$context->get_root_ref();`
`56`	`56`	`$_lang = $lang;`
`57`	`57`
`58`		`- eval($this->code);`
	`58`	`+ eval(' ?>' . $this->code . '<?php ');`
`59`	`59`	`}`
`60`	`60`	`}`