keven1z

In the theme editor, you can insert any php command and and execute it.

5

Hello,while testing the cms,I found a issue in 3.4.0a. This issue occurs in the theme editor. 1. I inserted this code `eval($_GET['zii']);` before `if(defined('IN_GS')){ die('you cannot load this page directly.');`....