summaryrefslogtreecommitdiff
path: root/LedgerSMB
diff options
context:
space:
mode:
Diffstat (limited to 'LedgerSMB')
-rwxr-xr-xLedgerSMB/Form.pm7
1 files changed, 5 insertions, 2 deletions
diff --git a/LedgerSMB/Form.pm b/LedgerSMB/Form.pm
index 4fa3cb43..af8deae5 100755
--- a/LedgerSMB/Form.pm
+++ b/LedgerSMB/Form.pm
@@ -761,8 +761,11 @@ sub parse_template {
s/.*?<\?lsmb if (.+?) \?>/$1/;
if (/\s/) {
- @a = split;
- $ok = eval "$self->{$a[0]} $a[1] $a[2]";
+ @args = split;
+ if ($args[1] !~ /^(==|eq|>|gt|>|lt|>=|ge|le|<=|ne|!=)$/){
+ $self->error("Unknown/forbidden operator");
+ }
+ $ok = eval "$self->{$args[0]} $args[1] $args[2]";
} else {
$ok = $self->{$_};
}