About: Yolanda O'Bannon

Hi Eduan,

We have enabled eval() but blacklisted the spammers toolbox with the above config. Hopefully s2member will not require the use of the spammers toolbox in the next generation.

Thanks,

Rich
Senior Web Applications Developer

Hello Eduan,

Thank you for your response.

Yes we are running 130221.

From the changelog the eval() issue was last addressed in 130213.

* (s2Member/s2Member Pro) **General Code Cleanup** Removing all unnecessary uses of PHP’s `eval()` function in s2Member’s codebase. These were used to keep repetitive code all in a single line; part of a standard the WebSharks™ development team is now moving away from. Removed in this release to improve readability for developers; and to prevent unnecessary confusion.

# grep “eval(” *
login-customizations.inc.php: eval(“?>”.$code);
tracking-codes.inc.php: eval(“?>” . $code);
# grep “eval (” *
utilities.inc.php: eval (“?>” . trim ($code));
utils-s2o.inc.php: eval (“?>” . trim ($code));
# pwd
…wp-content/plugins/s2member/includes/classes

Hm, only 4 left, great…

However, in the classes directory:
# grep evl *

[A page of deps listed… evl() calls eval() ]

Apparently some UI rendering and “shortcode” looks like.

Can you replace the eval()/evl() dependencies for UI rendering and Shortcode with a lightweight templating engine instead? Or just use simpler template strings where possible:
http://stackoverflow.com/questions/7683133/does-php-have-a-feature-like-pythons-template-strings

Thanks!
Rich Kucera
Senior Web Applications Dev/Admin
Howard Hughes Medical Insitute
kucerar@hhmi.org

Sorry, I forgot one thing. Would the same person, a student John Smith for example, be able to sign up for 2 different courses?

Thanks so much for your response, Raam! A few more questions:

• All of our courses are free. Clearly S2Member is designed for paid membership sites. Will we be able to set up different levels of unpaid access, such as for students and teachers without needing custom programming?
• It looks like S2Member Pro Version would be able to help us with 2 levels of viewers (teachers and students) in one course. Would we be able to have separate access for multiple courses? For example, we will have a Microscopy course, and a Biology 101 course, and each will need to have hierarchical access for teachers and students. We could eventually have many courses. Could each course have separate hierarchical access for its teachers and students? And would we be able to see in the user lists on WordPress that a particular user had signed up as a teacher to the Microscopy course vs. the Biology 101 course?

Best,

Yolanda
iBioSeminars.org