31
JCash
Re: Protector doesn't like & # 3 9 ;
  • 2011/10/17 20:16

  • JCash

  • Just popping in

  • Posts: 66

  • Since: 2011/2/22


Thanks trabis !

Just add
Quote:
config.entities = false;

... into ckeditor/configs.js

Solved



32
JCash
Re: Protector doesn't like & # 3 9 ;
  • 2011/10/17 15:10

  • JCash

  • Just popping in

  • Posts: 66

  • Since: 2011/2/22


More information :

> it seems to be related to class/smarty/xoops_plugins/function.block.php file (because usual blocks work with simple quote)

> all entities for simple quote are banned :
& # 3 9 ;
& # 0 3 9 ;
& # x 2 7 ;

> exceptions seem allowed into Protector ('protector/library/HTMLPurifier/Lexer.php')
/**
     * Most common entity to raw value conversion table for special entities.
     */
    
protected $_special_entity2str =
            array(
                    
'"' => '"',
                    
'&'  => '&',
                    
'<'   => '<',
                    
'>'   => '>',
                    
'&#39;'  => "'",
                    
''' => "'",
                    '&#x27;' => "'"
            );


> Xoops 2.5.3 and CKEditor 3.6 : with Xoops 2.5.1 and the same CKE version, there is no trouble



33
JCash
Protector doesn't like & # 3 9 ;
  • 2011/10/17 14:55

  • JCash

  • Just popping in

  • Posts: 66

  • Since: 2011/2/22


When I enter something like that in my custom block :

I'am just a singer of song

Protector replies SQL INJECTION FOUND and in details :
Quote:
UPDATE x22e_newblocks SET options='', name='Bloc personnalisé (Format auto sans smileys)', isactive=1, title='[My Title block]', content='<h4>I & # 3 9 ; m a singer of songs</h4>', side=5, weight=99, visible=0, c_type='', template='', bcachetime=0, last_modified=1318862418 WHERE bid=67


I use many hacks so it is not a bug, just something very annoying for me :


1. I use CKEditor by default in all my blocks

For that I had to replace into class/xoopsform/formdhtmltextarea.php :

//var $htmlEditor = array();

by :
var $htmlEditor = array( 'XoopsFormCkeditor''/class/xoopseditor/ckeditor/ckeditor.php' );


PS : I know there is an option to do that directly from System preferences, but ... it does not work (CKEditor is not displayed instead of standard editor)


2. I use <{block id = 67}> to display my block


Is there something to do to save my " & # 3 9 ; " ?

Thanks



34
JCash
Re: "Receive occasional email notices"
  • 2011/10/17 14:20

  • JCash

  • Just popping in

  • Posts: 66

  • Since: 2011/2/22


About I modified the wrong file (class/ registerform.php), the right seems to be www/ register.php

$user_mailok = (isset($_POST['user_mailok']) && intval($_POST['user_mailok'])) ? 1 : 0;

has to be

$user_mailok = (isset($_POST['user_mailok']) && intval($_POST['user_mailok'])) ? 0 : 1;

Solved.



35
JCash
register.php : caption marker displayed for all fields
  • 2011/10/17 12:01

  • JCash

  • Just popping in

  • Posts: 66

  • Since: 2011/2/22


All caption fields have a * but Website information is not required, just asked :

$reg_form->addElement(new XoopsFormText(_US_WEBSITE, 'url', 25, 255, $myts->htmlSpecialChars($url)));

If I add :

$reg_form->addElement(new XoopsFormText(_US_WEBSITE, 'url', 25, 255, $myts->htmlSpecialChars($url)), false);

... nothing happens



36
JCash
Re: If we were to start a 2.6 Branch what would you like to see.
  • 2011/10/17 11:17

  • JCash

  • Just popping in

  • Posts: 66

  • Since: 2011/2/22


There is no template to customize some system' pages :
> register form
> search form (like this)
> ... may be others

... I do not understand anything with php, so full html / css code would be very helpful


Edit, example :

I would like to display a text on the top of the register form (example, to explain what are the advantages to register on my site). To do so, I have to hack registerform.php file.

Quote:

$reg_form = new XoopsThemeForm('<h2 style="width: 950px">Create your member account</h2>
<div id="badge-help">
<ul>Your advantages :
<li>Advantage 01 : lorem ipsum</li>
<li>Advantage 02 : lorem ipsum ipsum</li>
<li>Advantage 03 : lorem ipsum ipsum ipsum</li>
</ul>
</div>', 'userinfo', 'register.php', 'post', true);


... it would be more simple with a tpl



37
JCash
Re: "Receive occasional email notices"
  • 2011/10/17 11:12

  • JCash

  • Just popping in

  • Posts: 66

  • Since: 2011/2/22


Same question but Xoops code has changed :
Quote:

$reg_form->addElement(new XoopsFormRadioYN(_US_MAILOK, 'user_mailok', $user_mailok));


--> how could I make Yes checked by default ?



38
JCash
Re: Installation Script...
  • 2011/10/17 10:37

  • JCash

  • Just popping in

  • Posts: 66

  • Since: 2011/2/22


... back to the original question "If we were to start a 2.6 Branch what would you like to see."

> add some tpl to customize system module layout : register form and search form



39
JCash
Re: User profile AJAX rating hack
  • 2011/10/16 13:58

  • JCash

  • Just popping in

  • Posts: 66

  • Since: 2011/2/22


Thanks for sharing !



40
JCash
Re: Jobs Module Problem
  • 2011/10/5 12:47

  • JCash

  • Just popping in

  • Posts: 66

  • Since: 2011/2/22


Thank you




TopTop
« 1 2 3 (4) 5 6 »



Login

Who's Online

204 user(s) are online (132 user(s) are browsing Support Forums)


Members: 0


Guests: 204


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Apr 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits