Skip to content

Instantly share code, notes, and snippets.

@tamasd

tamasd/gist:1759966

Forked from anonymous/gist:1730581
Created February 7, 2012 14:35
Download ZIP

Revisions

  1. tamasd revised this gist Feb 7, 2012. 1 changed file with 2 additions and 4 deletions.
    6 changes: 2 additions & 4 deletions gistfile1.txt
    View file
    Original file line number Diff line number Diff line change
    @@ -1,7 +1,5 @@
    Index: sites/all/modules/views_bulk_operations/actions/script.action.inc
    ===================================================================
    --- sites/all/modules/views_bulk_operations/actions/script.action.inc (revision 39640)
    +++ sites/all/modules/views_bulk_operations/actions/script.action.inc (working copy)
    --- actions/script.action.inc
    +++ actions/script.action.inc
    @@ -1,6 +1,10 @@
    <?php

  2. @invalid-email-address Anonymous created this gist Feb 3, 2012.
    26 changes: 26 additions & 0 deletions gistfile1.txt
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,26 @@
    Index: sites/all/modules/views_bulk_operations/actions/script.action.inc
    ===================================================================
    --- sites/all/modules/views_bulk_operations/actions/script.action.inc (revision 39640)
    +++ sites/all/modules/views_bulk_operations/actions/script.action.inc (working copy)
    @@ -1,6 +1,10 @@
    <?php

    function views_bulk_operations_script_action_info() {
    +##GardensExcludeFromExportStart################################################
    +// Make it impossible on Gardens sites to execute PHP scripts via VBO.
    +return array();
    +##################################################GardensExcludeFromExportEnd##
    if (!module_exists('actions_permissions') && !user_access('administer site configuration')) return array();
    return array('views_bulk_operations_script_action' => array(
    'type' => 'entity',
    @@ -10,6 +14,10 @@
    }

    function views_bulk_operations_script_action($entity, $context) {
    +##GardensExcludeFromExportStart################################################
    +// Make it impossible on Gardens sites to execute PHP scripts via VBO.
    +return;
    +##################################################GardensExcludeFromExportEnd##
    if (!module_exists('actions_permissions') && !user_access('administer site configuration')) {
    global $user;
    $msg = 'An attempt to execute arbitrary PHP script action by user <a href="user/!uid">%user</a> was blocked because of lack of permission.';