Smarty 2.6.9 released
Source: http://smarty.php.net
[31-March-2005] This is a patch release for those using the security features of Smarty. Variable function calls such as $foo() in {if} statements and {math} equations allowed PHP function execution from within a template, even with security enabled. Variable function calls have been disabled completely. If you are using security features, this upgrade is highly recommended.
Download: Smarty 2.6.9 and documentation