[Done v1.3.9h] HTML tags show after upgrade to 1.3.9g

Quote:

---

Originally Posted by countrycharm

Why? What's wrong with Dreamweaver?

---

It's main niche is for html pages
It adds unnecessary code - - code bloat
Also it designs a html page and there are parts of it you MUST not use

I don't know if this is important or not, but I while trying to install an add-on, HTML was being added to the database

Full details in the link below

http://www.zen-cart.com/forum/showpo...4&postcount=29

NOTE: Check post #52 of this thread as it has been updated for fixes for the Install SQL Patch ...

Quote:

---

Originally Posted by Ajeh

NOTE: Check post #52 of this thread as it has been updated for fixes for the Install SQL Patch ...

---

Thank you Ajeh :hug:

Quote:

---

Originally Posted by Ajeh

Try using for the extra_white_list.php file:
/admin/includes/extra_configures/extra_white_list.php

and put into that file the code:

Code:

---

<?php
$global_xss_whitelist = isset($global_xss_whitelist) ? $global_xss_whitelist : array();
$my_whitelist  = array('file_contents', 'banners_html_text', 'pages_title', 'message_html', 'manufacturers_name', 'symbol_left', 'symbol_right', 'query_string');
$global_xss_whitelist = array_merge($my_whitelist, $global_xss_whitelist);

---

and then try to edit the Define Page or Banner HTML or EZPage Title or Send Email once more and save it to see if this displays correctly ...

NOTE: the file
/admin/includes/extra_configures/extra_white_list.php

is a file that you create for this code ...

NOTE: Updated for Manufactuers Name, Currencies Left Symbol and Currencies Right Symbols and Install SQL Patches

---

1. Has this fix been applied to the 1.3.9g download or do we have to add it every time.
2. Does this needed to be added to sites that have been upgraded to 1.3.9g also.
3. Does this always happen with 1.3.9g files?

Thanks,

C

Quote:

---

Originally Posted by countrycharm
Why? What's wrong with Dreamweaver?

---

Quote:

---

Originally Posted by kobra

It's main niche is for html pages
It adds unnecessary code - - code bloat
Also it designs a html page and there are parts of it you MUST not use

---

I didn't make that post.

Quote:

---

Originally Posted by cshart

1. Has this fix been applied to the 1.3.9g download or do we have to add it every time.
2. Does this needed to be added to sites that have been upgraded to 1.3.9g also.
3. Does this always happen with 1.3.9g files?

Thanks,

C

---

You will have to add it until 1.3.9h comes out.

Hi, I tried this, I just upgraded to 1.3.9g as well and I'm still seeing a lot of html on the preview page. I've uploaded a screen shot, does this look like the same issue to you? Thanks.

The screenshot is pretty small, so I'll add some of the code here- I wonder if it has to do with the image handler module?

<link href="file:///C:\DOCUME~1\Mel\LOCALS~1\Temp\msohtmlclip1\01\clip_filelist.xml" rel="File-List" /><link href="file:///C:\DOCUME~1\Mel\LOCALS~1\Temp\msohtmlclip1\01\clip_themedata.thmx" rel="themeData" /><link href="file:///C:\DOCUME~1\Mel\LOCALS~1\Temp\msohtmlclip1\01\clip_colorschememapping.xml" rel="colorSchemeMapping" /><!--[if gte mso 9]><xml> <w:WordDocument> <w:View>Normal</w:View> <w:Zoom>0</w:Zoom> <w:TrackMoves/> <w:TrackFormatting/> <w:PunctuationKerning/> <w:ValidateAgainstSchemas/> <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid> <w:IgnoreMixedContent>false</w:IgnoreMixedContent> <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText> <w:DoNotPromoteQF/> <w:LidThemeOther>EN-US</w:LidThemeOther> <w:LidThemeAsian>X-NONE</w:LidThemeAsian> <w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript> <w:Compatibility> <w:BreakWrappedTables/> <w:SnapToGridInCell/> <w:WrapTextWithPunct/> <w:UseAsianBreakRules/> <w:DontGrowAutofit/> <w:SplitPgBreakAndParaMark/>

The Page Preview will be fixed in v1.3.9h ... if it looks right on the Store you should be okay ...

I posted every code patch fix I could find and still the html code showed through (on main page), ZC 1.3.9g. So I whited out most of those define pages just to get things to work.... In searching pages (w/ TextWrangler) on how to use the SPONSORS box I discovered the following file was corrupted:

admin/editors/htmlarea/popups/about.html

Apparently the original file was not saved properly (or something similar) and the file was not recognizable to TextWrangler. Opening the file and re-typing over a single character (any will do) and saving the file fixed whatever the corruption issue was. Uploaded the newly saved 'about.html' and now everything (html rendering) seems to be working as advertised. The question now is 'Was that the problem all along?' and will the original ZC 1.3.9g upload work with this change and not all the added in code patch fixes?