important bits we need to allow php executable content. These must be explicitly allowed - but only if the account has ACCOUNT_ROLE_ALLOWCODE and *only* for web pages and profile fields. This content cannot be transmitted to other sites.

1 files changed, 2 insertions, 2 deletions

diff --git a/boot.php b/boot.php
index 4868046c6..1fd0d2172 100755
--- a/boot.php
+++ b/boot.php
@@ -434,8 +434,8 @@ define ( 'ACCOUNT_PENDING',      0x0010 );
  * Account roles
  */
 
-define ( 'ACCOUNT_ROLE_ADMIN',    0x1000 );
-
+define ( 'ACCOUNT_ROLE_ADMIN',     0x1000 );
+define ( 'ACCOUNT_ROLE_ALLOWCODE', 0x0001 );    
 
 /**
  * Item visibility