From aee958f56c654b22278d255a13c64ef72ca2dbaa Mon Sep 17 00:00:00 2001 From: Scott Carpenter Date: Thu, 7 Nov 2019 11:24:30 -0700 Subject: [PATCH] Check that settings aren't closures before sending them through `eval()` This resolves #89 --- src/Plugin.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/Plugin.php b/src/Plugin.php index 3bf54aa1..b4ffed00 100644 --- a/src/Plugin.php +++ b/src/Plugin.php @@ -318,8 +318,8 @@ public function buildPHPConfig() $config['timeout'] = intval($this->settings['timeout']); foreach (UI::settingsOfType(UI::SETTING_INPUT_TYPE_PHP) as $setting) { - - if (isset($config[$setting])) { + + if (isset($config[$setting]) && ! ($config[$setting] instanceof \Closure)) { $code = is_string($config[$setting]) ?: 'return ' . var_export($config[$setting], true) . ';';