In autoassignrole_path there is displayed a page description, but this check_format has $check = TRUE,
so you cannot use php there(even if its eval :) ), because the anonymous user shouldn't have access to php input format :)

CommentFileSizeAuthor
autoassignrole-markup.patch811 bytesdawehner

Comments

cyberswat’s picture

cyberswat commented

Hi ... could you explain the use case that requires setting this to FALSE? What php would need to be executed there. I want to make sure I undestand what you are trying to accomplish before applying this patch.

dawehner’s picture

dawehner
Primary language German
commented

Lets assume that someone wants to use $page->description together with php input format.
For example display and load a custom help text.

Core does this quite a lot of times

cd modules/node && grep "check_markup" . -rn
./node.module:1036:    $node->body = check_markup($node->body, $node->format, FALSE);
./node.module:1039:    $node->teaser = check_markup($node->teaser, $node->format, FALSE);
cyberswat’s picture

cyberswat commented
Status: Needs review » Fixed

http://drupal.org/cvs?commit=265744

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.