eval in applying pricing overrides should be sanitized

[RoelandMatthijssens]

This is not a big concern since these fields can only be accessed by trusted users, but it is still a bit unsafe to say the least...

it would be fun to see this happen on a production environment =) system("shred -r ../../*)

[angryzor]

It's a feature