colosa/processmaker — pull request #2107 by julceslauhub (2013-10-31 00:05:42+00:00)
Title: BUG 13436 ProcessMaker 2.x Authenticated PHP Code Execution SOLVED

- The function sent in the variable $_REQUEST['action'] was always executed
- A new method was implemented to validate if is a user custom function or a system function (G::isUserFunction)