From 2079b3639a5a6c813d07234385b2e1ad148a11ae Mon Sep 17 00:00:00 2001
From: Sunil Mohan Adapa <sunil@medhas.org>
Date: Sat, 5 Apr 2014 14:52:51 +0900
Subject: [PATCH] Dont use exec for importing templates

---
 util.py | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/util.py b/util.py
index 07000bedf..4f2ba018f 100644
--- a/util.py
+++ b/util.py
@@ -1,9 +1,12 @@
 import os, sys
 import cherrypy
 import cfg
+import importlib
 import sqlite3
+
 from filedict import FileDict
 
+
 def mkdir(newdir):
    """works the way a good mkdir should :)
         - already exists, silently complete
@@ -67,7 +70,8 @@ def page_template(template='login_nav', **kwargs):
     #if template=='base' and kwargs['sidebar_right']=='':
     #    template='two_col'
     if isinstance(template, basestring):
-        exec ("from templates.%s import %s as template" % (template, template))
+        template_module = importlib.import_module('templates.' + template)
+        template = getattr(template_module, template)
     try:
         submenu = cfg.main_menu.active_item().encode("sub_menu", render_subs=True)
     except AttributeError: