nukeSEO.com - PHPNuke SEO Search engine optimization, professional tools including nukeSEO, nukeSPAM, nukeFEED, nukePIE, nukeWYSIWYG and more

 

. Welcome to nukeSEO.com  ! 
.
.
.


.
nukeSEO.com: Forums


 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

attributes stripped
 
 
Post new topic   Reply to topic    nukeSEO.com Forum Index -> nukeWYSIWYG (tm)
View previous topic :: View next topic  
Author Message
raptor5001
Newbie
Newbie


Joined: Mar 04, 2006
Posts: 3

PostPosted: Wed Mar 29, 2006 8:08 am    Post subject: attributes stripped Reply with quote

Hi, i have installed nukeWYSIWYG on my chatserv patched PHPNuke 7.8. I have commented out the lines in javascript.php to prevent tinymce from loading and fckeditor seems to work perfectly. But one problem is that when, for example, I add an image and post... well here is an example:

Code:
<img src="http://www.mysite/com/media/2006/03/image.png" alt="" />

becomes
Code:
<img />


all attributes from any tag are stripped. font, span, div, you name it. it may be a problem with kses... but my config.php is all set with the new allowedhtml in the readme and the old one is commented out. help?
  
Back to top
View user's profile Send private message
montego
webmaster


Joined: Dec 26, 2005
Posts: 254

PostPosted: Sat Apr 01, 2006 8:51 am    Post subject: Re: attributes stripped Reply with quote

I just tried this on my installation and it works. I am wondering, did you replace the check_html() function in mainfile.php with the one from nukeWYSIWYG?

The original check_html function could be stripping these if you are still using it.

Also, are you by chance using the 3.2 patches?
  
Back to top
View user's profile Send private message Visit poster's website
raptor5001






PostPosted: Sun Apr 02, 2006 12:23 am    Post subject: Re: attributes stripped Reply with quote

Yes, I have replaced the check_html with the nukewysiwyg one. I also am using the 3.2 patch, too. Thanks for your help!

EDIT: I was looking at my config.php and I saw this at the bottom of it:
Code:
// Nuke Patched 4.0


Is there even a 4.0 out? I'm pretty sure I used 3.2
  
Back to top
Guardian
webmaster


Joined: Dec 25, 2005
Posts: 364
Location: Vsetin, Czech Republic

PostPosted: Sun Apr 02, 2006 8:15 am    Post subject: Re: attributes stripped Reply with quote

The latest patched series is indeed 3.2 so I have no idea wht that should appear in your nuke config.php file, seems rather odd to me!

If you are still having this issue with 7.8 then there must some more security checking code that is loaded elsewhere which is peculiar to nuke 7.7+ as I and others are not able to reproduce this issue with nuke 7.6 patched.
  
Back to top
View user's profile Send private message
montego






PostPosted: Mon Apr 03, 2006 9:05 pm    Post subject: Re: attributes stripped Reply with quote

Yeah, I cannot find any references to Nuke Patched 4.0 anywhere either. Tried Google and Yahoo as well as in my internal nuke files. I found 3.1, but not 4.0. But, then again, I am not running anything above 7.6 at the moment.
  
Back to top
raptor5001






PostPosted: Wed Apr 05, 2006 6:09 am    Post subject: Re: attributes stripped Reply with quote

maybe the 3.2 creaters made a typo? not sure...

does anyone have 7.8 to test this on? i really like fckeditor and would hate to have to discontinue using it..

EDIT: I have fixed it! maybe kguske can advertise a nukewysiwyg package for 7.8 with this info:

in the news/admin/index.php, a addslashes is called on the text before it is passed into check_html. thus, this:
Code:
<img src="http://www.mysite/com/media/2006/03/image.png" alt="" />

becomes this:
Code:
<img src=\"http://www.mysite/com/media/2006/03/image.png\" alt=\"\" />

for some reason, kses doesnt like this and strips the attributes. the fix is to go thru all the post_story functions and other like functions and remove the addslashes. i know there are alot of these and they must be removed in the reviews module and other modules where you plan to use fckeditor. but it works. Wink

still havent figured out where that mysterious Nuke Patched 4.0 came from. maybe my site made a trip to the future Razz
  
Back to top
montego






PostPosted: Sat Apr 15, 2006 11:36 am    Post subject: Re: attributes stripped Reply with quote

Yes, the 3.2 patches are causing issues with sites that have "magic quotes" turned on. There was no "discrimination" used in the use of the addslashes and stripslashes. Unfortunately, the issue is all over the place. One possible thing to try is adding this to your .htaccess file:

PHP_FLAG magic_quotes_gpc Off

With magic quotes on, input coming in from GET/POST will already have the slashes added, so, in effect, that addslashes is duplicating that unnecessarily (to a fault).
  
Back to top
Display posts from previous:       
Post new topic   Reply to topic    nukeSEO.com Forum Index -> nukeWYSIWYG (tm) All times are GMT - 5 Hours
 
 Page 1 of 1

 

Jump to:   
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Powered by phpBB © 2001-2008 phpBB Group


Page Generation: 0.03 Seconds