-
Re: HTML tags show after upgrade to 1.3.9g
DrByte,
I understand that. I simply was stating that on loading newest vers. of xamp, there was problem in where the php.ini files was located. And that maybe the (my) problem with the HTML situation could be related to xampp. IDK, my bad if i am reaching. I am just trying to work the editor problem. Is there a problem? I keep searching for the problem on my end.
Thanks!!
-
Re: HTML tags show after upgrade to 1.3.9g
Personally I think using ANY upload tool in an HTML editor is a BAD thing. It leaves you open to security problems, and is really just the wrong way to put content on your site.
Thus I have no interest in even trying to figure out what might be causing you troubles with it.
-
Re: HTML tags show after upgrade to 1.3.9g
DrByte,
Ok. I understand. I am not trying to upload anything. I am simply trying to add images to the define_page_editor, etc. on my test server. It use to work, now it does not. that's all
I am just a newbe, a nobody, so if my pm pissed you off, I apologize, which i thought i already did. I was a little slow in forum etiquette. Thanks for all your post which I try to learn by.
regards,
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Ajeh
I don't know off the top of my head I do not use that Best Seller scrolling Add On ...
Thanks for your help. I'm not going to worry about it to much. I can away switch the bread crumbs off. I really don't need them any way. Thanks again
-
Re: HTML tags show after upgrade to 1.3.9g
so far so good, i still need to install this file into another site i did the update at but it has worked in my own too...had html showing instead of what the define page was supposed to be. It showed the html on the main page NOT just in the admin editing place...as well as the product description pages...when done they would show html not the regular people talk...lol
happy it was not me messing up the update.:clap:
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Looper
DrByte,
Ok. I understand. I am not trying to upload anything. I am simply trying to add images to the define_page_editor, etc. on my test server. It use to work, now it does not. that's all
I am just a newbe, a nobody, so if my pm pissed you off, I apologize, which i thought i already did. I was a little slow in forum etiquette. Thanks for all your post which I try to learn by.
regards,
Not pissed off. Just stating a point of view. Sorry - I could have worded it differently. Apologies.
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Looper
DrByte,
Ok. I understand. I am not trying to upload anything. I am simply trying to add images to the define_page_editor, etc. on my test server. It use to work, now it does not. that's all
Personal opinions aside, I just downloaded the FCKeditor addon from the Free Addons area and installed it on my clean v1.3.9g site (with the whitelisting patch discussed in this thread). I then opened the Define Pages Editor, selected FCKeditor, and then define_main_page.php
I clicked in a spot where I wanted to insert an image, and then clicked the Image button in the button bar. I then entered the path to an image on the server: /store/images/free.gif ... and it immediately showed me that image and when I saved it the image shows just fine on the storefront.
So, unless the problem is related to you not correctly applying the whitelist update discussed at length in this thread, then it's something else you've got busted on your site.
-
Re: HTML tags show after upgrade to 1.3.9g
Is there a list of variables that someone could posted that we could potentialy add to the whitelist to reduce the number of people asking how to add certain variables.
This would allow people to add and remove as needed and have all the information easy to find, also how would you do this with easy pages.
An example:
file_contents : ( description of what it affects)
banners_html_text: ( description of what it affects)
-
Re: HTML tags show after upgrade to 1.3.9g
DrByte,
Thanks. Actually that helps me, I applied the whitelist patch and corrected the showing html tags, etc. so it has to be something i am doing wrong. Somewhere I saw and learned to use the FCKeditor, browse to image folder, and click the upload to server (meaning my local server). Having said that, I'll go back and make sure I know how to use the editors. That could be a bigger problem. LOL
Thanks for all,
Looper
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
neit
Is there a list of variables that someone could posted that we could potentialy add to the whitelist to reduce the number of people asking how to add certain variables.
This would allow people to add and remove as needed and have all the information easy to find, also how would you do this with easy pages.
An example:
file_contents : ( description of what it affects)
banners_html_text: ( description of what it affects)
Neit, I already asked for this, but it doesn't look like it's going to happen :(
Admittedly I've only been a ZC user for about 8 months now, but it's the first time I've seen a balls-up in an upgrade. The devs normally do an awesome job. Maybe they need some more coffee bought for them :wink:
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Ajeh
Try using for the extra_white_list.php file:
/admin/includes/extra_configures/extra_white_list.php
and put into that file the code:
Code:
<?php
$global_xss_whitelist = isset($global_xss_whitelist) ? $global_xss_whitelist : array();
$my_whitelist = array('file_contents', 'banners_html_text', 'pages_title', 'message_html');
$global_xss_whitelist = array_merge($my_whitelist, $global_xss_whitelist);
and then try to edit the
Define Page or
Banner HTML or
EZPage Title or
Send Email once more and save it to see if this displays correctly ...
NOTE: the file
/admin/includes/extra_configures/extra_white_list.php
is a file that you create for this code ...
Please, please help me to understand...Stop talking greek, please..
Now if I take this right...
The reason my defines pages are talking html crap all over it, has to do with some coding problem that got messed up in this 1.39g upgrade.
So if I want to fix the problem until someone figures we should have a 1.39h upgrade, then I need to what?
Make a folder?
Then insert this code into the folder?
Then upload this folder to my ....
admin/includes/extra_configures/....???????
And give it the name:::: extra_white_list.php ?????
Just pretend I have a box of rocks for a brain, so I need more detail please.
And why doesn't someone just create this file and fix the problem? Okay, I am a box of rocks....
-
Re: HTML tags show after upgrade to 1.3.9g
The current release v1.3.9g was just released with the added Protection and, unfortunately, is too good ... so there is the need for the "white list" at this time ...
This will all be addressed in the next release ...
It takes two seconds to open a blank file and save it as:
/admin/includes/extra_configures/extra_white_list.php
You already have the directory:
/admin/includes/extra_configures/
You want to make a file called:
extra_white_list.php
and load it to the directory:
/admin/includes/extra_configures/
and in that file copy and paste the code posted in thread #52 ...
What this code is doing is excluding certain parts of the code from the extra protection that has been added in v1.3.9g from being applied to certain areas of the Admin so that when you edit the data and enter the HTML code it is not getting this extra protection as it also is protecting you against HTML code that you need to enter in some areas of the Admin ...
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Ajeh
The current release v1.3.9g was just released with the added Protection and, unfortunately, is too good ... so there is the need for the "white list" at this time ...
This will all be addressed in the next release ...
It takes two seconds to open a blank file and save it as:
/admin/includes/extra_configures/extra_white_list.php
You already have the directory:
/admin/includes/extra_configures/
You want to make a file called:
extra_white_list.php
and load it to the directory:
/admin/includes/extra_configures/
and in that file copy and paste the code posted in thread #52 ...
What this code is doing is excluding certain parts of the code from the extra protection that has been added in v1.3.9g from being applied to certain areas of the Admin so that when you edit the data and enter the HTML code it is not getting this extra protection as it also is protecting you against HTML code that you need to enter in some areas of the Admin ...
I thank you very kindly for your straight forward instructions..
This did the trick, so I shall apply it to my second store also..
-
Re: HTML tags show after upgrade to 1.3.9g
I tried to find info about install sql patches.
for me it change " to " sp the array was not working.
-
Re: HTML tags show after upgrade to 1.3.9g
Could you give an example of what you are having a problem with? :unsure:
-
Re: HTML tags show after upgrade to 1.3.9g
Did anyone not try the new version before making it available to the public because I have 2 broken websites that I will gladly let you practice on next time? Also why did you change the name of the admin folder?
I assume your going to say for security reasons BUT don't you think if a person is smart enough to hack a website they probably have downloaded zen cart to figure out how to hack it. Which would mean they would already know the name of the "secret admin folder" any way.
A month from now their will probably be a big yellow warning saying change your admin name to something other than zc_admin.
It just makes me mad that every other week their is a so called "critical update" that needs to be done and if it's not done their is all this garbage in my admin that won't go away, telling me how I need this important update, and then we do the update and it breaks our site.
Then I read one of the admin talking about not wanting a billion patches, but it's sure ok for us to have a billion updates every week. If it wasn't such a pain to do the updates that would probably help too.
-
Re: HTML tags show after upgrade to 1.3.9g
Installed the Rewards Points mod today, first on my local store and then on the live site. This mod requires the installation of the included new.sql patch which adds extra boxes to Admin > Configuration.
Part of this sql is shown here:
Quote:
.....
REPLACE INTO `configuration`
(`configuration_id` ,`configuration_title` ,`configuration_key` ,`configuration_value` ,`configuration_description` ,`configuration_group_id` ,`sort_order` ,`last_modified` ,`date_added` ,`use_function` ,`set_function`)
VALUES (NULL , 'Reward Point Status Track', 'REWARD_POINTS_STATUS_TRACK', '', '<b>Simple mode:</b> All new reward points are set to Pending and are changed to Earned when the Order Status changes. If the Order Status is then changed back to Pending then the reward points are transferred back from Earned.<br /><br /><b>Advanced mode:</b> Set the order status ....etc etc
The highlighted html tags are all showing just as in the quote above, no breaks are inserted into the text and no bold items show up.
Manually fixed this on my local site by editing relevant DB entries. In the DB the brackets were showing as < or >
The extra_white_list.php file is installed, it fixed the EZ Pages issue as expected but has not addressed this issue.
I know this is only of a 'cosmetic' nature and does not affect the operation of the store but is worth noting for the next upgrade.
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
jasong42122
... but it's sure ok for us to have a billion updates every week.
You must be referring to some other software. I've never seen Zen Cart release a billion updates. Ever.
Come to think of it we don't even have that many lines of code in Zen Cart yet.
But, thanks for cluttering our forum with your rant. I hope you feel better after you got that off your chest.
-
Re: HTML tags show after upgrade to 1.3.9g
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
DrByte
frank, it's noted.
Thanks DrByte
-
Re: HTML tags show after upgrade to 1.3.9g
The tags are also showing in the Coupon Description (customer can see) of a newly created Discount Coupon. I am using CKEditor.
-
Re: 139g weird problem define pages editor
Quote:
Originally Posted by
p1lot
Well,
I use a lot of HTML tags in my define pages as well as in my product descriptions.
And all < and >'s turn into < or >.
I fixed it already for the define pages, not for the product previews though.
Here the fix for "admin/define_pages_editor.php":
I added line 77 ->
http://pastie.org/1191676
I did change all lines and the problem was solved.. Thanks
-
Re: HTML tags show after upgrade to 1.3.9g
I had the same problem, followed Linda's instructions. Bingo all fixed. Thanks Linda!
-
Re: HTML tags show after upgrade to 1.3.9g
Linda, you're heaven sent. Thank you, Thank you, Thank you. I've been the whole morning trying to figure out how to sort it out this problem, until I saw your post. Thank you!!!
-
Re: HTML tags show after upgrade to 1.3.9g
Linda,
I did what you wrote and it worked II guess to a point. In the define pages editor and some ez pages that have html instead of an external or internal link it works
However in the product description pages I set the wording and it appears fine....click preview button and I see all the htm coding inserted within....yet the actual page is displaying normally on the store.
I have a couple of admns that will freak when they see the code like the product description and newsletter section. they will think that the customers will see this too.
Is there something to add to the code to stop the preview from not displaying what it will actually look like.
btw, I use CKEditor
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
DarkAngel
Linda,
I did what you wrote and it worked II guess to a point. In the define pages editor and some ez pages that have html instead of an external or internal link it works
However in the product description pages I set the wording and it appears fine....click preview button and I see all the htm coding inserted within....yet the actual page is displaying normally on the store.
I have a couple of admns that will freak when they see the code like the product description and newsletter section. they will think that the customers will see this too.
Is there something to add to the code to stop the preview from not displaying what it will actually look like.
btw, I use CKEditor
answered in this post
-
Re: HTML tags show after upgrade to 1.3.9g
thanks clyde, I will tell all admins inall stores that they will see this and that it is not going to show up in the store as is seen.
It does look awful and maybe at one time that will be fixed....preview may not be as important as the actual page---if they put formatting in there it is great to actually see what it will look like, as it did before.
-
Re: HTML tags show after upgrade to 1.3.9g
This is only a problem in preview whilst in admin right? So as I don't use any html editors at all I can just skip this whitelist file entirely?
Also- security wise does it make a difference having a whitelist file? In other words does it open a site up to any higher risk of XSS attack?
If no is answer to second question, then I shall add it. Thanks.
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
This is only a problem in preview whilst in admin right? So as I don't use any html editors at all I can just skip this whitelist file entirely?
No, you will still see code in the admin preview if you do not add the whitelist you will also see it on the frontend
-
Re: HTML tags show after upgrade to 1.3.9g
If you can put up with the pain a tiny bit longer then you may be able to avoid whitelisting altogether with v1.3.9h. We're working on a more convenient option which may make life simpler for everyone.
In the meantime, if you aren't entering any HTML code or encoded text like & via your admin, you won't need to whitelist anything further. If you *are* entering such content then whitelisting will be needed in the meantime.
-
Re: HTML tags show after upgrade to 1.3.9g
kobra, Dr Byte: thanks, got it.
-
Re: HTML tags show after upgrade to 1.3.9g
I've been through this thread and I can't find the answer to this question.
I am upgrading my site to version g and when I tried to enter info to my main page define pages, it just shows the html.
Here is the site link:
http://www.kanawhaplayers.org/groupieg/
It doesn't matter if I copy code from dreamweaver or use zen's editor.
If this problem has been solved and posted, please point me to the post.
Thanks in advance.
-
Re: HTML tags show after upgrade to 1.3.9g
Look at this post #52 in this thread:
http://www.zen-cart.com/forum/showth...839#post941839
and see if that doesn't resolve the problem ...
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Ajeh
The current release v1.3.9g was just released with the added Protection and, unfortunately, is too good ... so there is the need for the "white list" at this time ...
This will all be addressed in the next release ...
It takes two seconds to open a blank file and save it as:
/admin/includes/extra_configures/extra_white_list.php
You already have the directory:
/admin/includes/extra_configures/
You want to make a file called:
extra_white_list.php
and load it to the directory:
/admin/includes/extra_configures/
and in that file copy and paste the code posted in thread #52 ...
What this code is doing is excluding certain parts of the code from the extra protection that has been added in v1.3.9g from being applied to certain areas of the Admin so that when you edit the data and enter the HTML code it is not getting this extra protection as it also is protecting you against HTML code that you need to enter in some areas of the Admin ...
For ma part I have a problem that this extra-white-list.php couldn't resolve.
For exemple I have a problem with the "Shipping & returns" file, then I created extra_white_list.php in /admin/includes/extra_configures/ and it didn't work.
Inside i wrote:
$my_whitelist = array('shippinginfo'); -> didn't work
I tried with:
$my_whitelist = array('shippinginfo.php'); -> didn't work
then tried with:
$my_whitelist = array('define_shippinginfo.php'); -> didn't work
tried with:
$my_whitelist = array('define_shippinginfo'); -> didn't work
Then I read to do this with xss_whitelist.php instead of extra-white-list.php -> didn't work
Sorry, may be I missed something?
Could somebody help me?
-
Re: HTML tags show after upgrade to 1.3.9g
Create the file as in post #52 ...
This line:
Code:
$my_whitelist = array('file_contents', 'banners_html_text', 'pages_title', 'message_html');
Hold the things that are "white listed" so that they work with the issues that are currently being cleaned by the security methods so that they do NOT get cleaned ...
You cannot just make up things for this white list ... they have to be the proper values and the code has to be written properly for the white list to work ...
First, try making the exact file listed in post #52 and then try to Edit the Shipping & Returns as you normally would and save it ... see if that doesn't correct the problem ...
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Ajeh
Create the file as in post #52 ...
This line:
Code:
$my_whitelist = array('file_contents', 'banners_html_text', 'pages_title', 'message_html');
Hold the things that are "white listed" so that they work with the issues that are currently being cleaned by the security methods so that they do NOT get cleaned ...
You cannot just make up things for this white list ... they have to be the proper values and the code has to be written properly for the white list to work ...
First, try making the exact file listed in post #52 and then try to Edit the Shipping & Returns as you normally would and save it ... see if that doesn't correct the problem ...
I wrote before but have been away for the weekend. And I didn't see that you asked me a question.
My note was about this also have problem in Install SQL Patching.
Frank also have that problem and DrByte has notice it.
So can you update the fix to include the install sql patching?
(I fix it by upload it in phpmyadmin but it's good for others before the 1.3.9h is ready).
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Ajeh
Create the file as in post #52 ...
This line:
Code:
$my_whitelist = array('file_contents', 'banners_html_text', 'pages_title', 'message_html');
Hold the things that are "white listed" so that they work with the issues that are currently being cleaned by the security methods so that they do NOT get cleaned ...
You cannot just make up things for this white list ... they have to be the proper values and the code has to be written properly for the white list to work ...
First, try making the exact file listed in post #52 and then try to Edit the Shipping & Returns as you normally would and save it ... see if that doesn't correct the problem ...
WAAAHOUUU!!!!!!!!!!
It works! Thank you very much.
-
Re: HTML tags show after upgrade to 1.3.9g
The newsletters are also showing the HTML tags.
Will the fix also fix that.
-
Re: HTML tags show after upgrade to 1.3.9g
Yes it will. That was discussed earlier in the thread.
-
Re: HTML tags show after upgrade to 1.3.9g
Adding 'comments' to the white list for me fixed the problems with order updates showing on the order screen, and the emails that these send :)
-
Re: HTML tags show after upgrade to 1.3.9g
Hi,
How to protect the configuration values from being modified when saved in the database? For instance if there are formatting tags in the payment module parameters ("pay to" text): <b>Account number<br />0000 0000 0000</b> the text it is changed to <b>Account number<br />: etc.
-
Main Page Image Not Showing - HTML Code Displaying
I added HTML code to define_main_page.php but the image it not showing. Only the HTML code is showing.
You can see it here: http://www.acreativepagehosting.com/discover/
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by acreativepage
I added HTML code to define_main_page.php but the image it not showing. Only the HTML code is showing.
Have you read this thread?
Have you instituted the fixes?
-
Problems with Text in Define Pages Editor Pages
I just upgraded to the latest .9g version and have the following issues:
1) All my text has been replaced with the example text. When I copy and paste the text into any of the pages (i.e. privacy, conditions, shipping, etc) as I have normally from MS Word - none of the formatting is kept and all I see is the text wrapping and HTML codes throughout. I find that I can use straight text but I would prefer HTML as I have boldings, colors, and formatting which I would like to keep.
2) The main page has been reset back to the initial text that appears when you first install zencart (i.e. Sales Message Goes Here) and also removed my logo and text I had on the main page.
Wondering if there is something I did or is known and are there any fixes for at lest #1?
Thank you - Jeff
-
Re: Problems with Text in Define Pages Editor Pages
Check this post #52 about this particular issue in v1.3.9g ...
http://www.zen-cart.com/forum/showth...839#post941839
-
Re: Problems with Text in Define Pages Editor Pages
I think there are more issues with the same item with not just the define pages editor. I was able to fix mine as posted above but even after installing items in the admin area the site is not displaying the formatting (<b>) but the actual HTML code. This is on my test site right now so I'll check it really good but seems to have a few other problems. The customer view looks ok though so I haven't seen any more problems from that end. It could just be a bug (COWA) but appears to be the same problem.
-
Re: Problems with Text in Define Pages Editor Pages
This code does NOT fix the Product Preview ... that will be updated in the next release ...
-
define mainpage showing html
hi,
since i updated the define main page is showing html for some reason
http://www.atspeedracing.co.uk/products/index.php
in the admin it shows up fine, but when you go to the cart it shows it as html... any ideas?
-
Re: HTML tags show after upgrade to 1.3.9g
Please follow post #52 of this thread ... then edit your file and save it to correct the problem ...
-
banners showing as html code on site
Hi there, i'm using a fresh install of 1.3.9g.
The issue i have is when i use an affiliate banner and put the html code into the code box, it shows the actual code in the banner box on my site.
I have another site which is running an earlier version 1.3.8 and this works fine.
Can some one please help.
Thanks very much for your time.
A.
-
Define page results shows in HTML code on public view
Zencart 1.3.9.g new install NO mods except additional themes.
Every time I made changes to the Main page in Define pages, in public view it displays HTML code.
I made sure that I have tried both ways first enter the html code in CODE view. When I switch to HTML view and check to see and everything looked fine. Saved changes . In public view it shows content in HTML (CODE) view.
I then tried opposite. Enter the text in HTML view with all the formatting etc. When I switch to CODE view and check to see and everything looked fine. Saved changes . In public view it shows content in HTML (CODE) view.
So I thought may be it was the editor. I have downloaded a TinyMCE editor and results are the same.
this is how it looks in public view below.
<ul> <li>FREE shipping Australia-wide on all orders! </li> <li>No surcharges on credit cards or PayPal </li> <li>100% privacy with discreet shipping and billing </li> <li> Quality tested Products </li> <li>We are a Real Australian owned business </li> </ul>
Any help would be much appreciated.
-
Re: Define page results shows in HTML code on public view
Just saw Dr.Btye's message about the bug and fix. All cool thanks
-
Re: HTML tags show after upgrade to 1.3.9g
Please see Post #52 of this thread for how to create a file to fix this and then edit the banner and save it again ...
-
Re: HTML tags show after upgrade to 1.3.9g
I recently upgraded several of my sites to 1.3.9g and did not realize this bug issue, as I've been involved in the Second Category Description Mod* here:
http://www.zen-cart.com/forum/showth...=61114&page=10
I had same html issues with the second category description and received a tip on this thread. Thanks, the fix in Post #52 fixed the bug for the defines pages.
However, the html is still showing on my second cateogry description upload as seen here (fresh 1.3.9g, only mod is Barebones template and second category description mod, as "merged" by myself:
http://www.wedding-mart.com/index.ph...=index&cPath=1
I can create the text with html formatting in the second category description field in the admin html editor, but have to manually insert into DB, which works as here:
http://www.wedding-mart.com/index.ph...=index&cPath=2
Can something be added to the white list fix to fix this?
Thanks for any help.
* Mainly want second category description field for SEO purposes...and would be on my "wish list".
-
Re: HTML tags show after upgrade to 1.3.9g
Add the name of the input field to the whitelist.
Or, wait for v1.3.9h which will make all this whitelisting moot.
-
Re: HTML tags show after upgrade to 1.3.9g
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
DrByte
Add the name of the input field to the whitelist.
Or, wait for v1.3.9h which will make all this whitelisting moot.
What do you mean by this?
The solution on post 52 didnt work for me I still have html dispaying on
user defined pages
conditions and privacy.
HELP! PLEASE!
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
DrByte
Add the name of the input field to the whitelist.
Or, wait for v1.3.9h which will make all this whitelisting moot.
Thanks again, seems to be working:
http://www.wedding-mart.com/index.ph...=index&cPath=1
Added to whitelist: 'categories_description_sub'
PS: Don't forget the comma separating other whitelisted items, made my admin blank when I first forgot it. ;)
-
Re: HTML tags show after upgrade to 1.3.9g
i also have the same problem..help..
http://ms-serve.com/bugs.jpg
-
Re: HTML tags show after upgrade to 1.3.9g
Did you read post #52 and then edit your define page again to fix it? :unsure:
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Ajeh
Try using for the extra_white_list.php file:
/admin/includes/extra_configures/extra_white_list.php
and put into that file the code:
Code:
<?php
$global_xss_whitelist = isset($global_xss_whitelist) ? $global_xss_whitelist : array();
$my_whitelist = array('file_contents', 'banners_html_text', 'pages_title', 'message_html');
$global_xss_whitelist = array_merge($my_whitelist, $global_xss_whitelist);
and then try to edit the
Define Page or
Banner HTML or
EZPage Title or
Send Email once more and save it to see if this displays correctly ...
NOTE: the file
/admin/includes/extra_configures/extra_white_list.php
is a file that you create for this code ...
thank you..it work very well
-
Re: HTML tags show after upgrade to 1.3.9g
I don't know enough about programming code to understand it, but that patch (post #52) sure worked beautifully.
It prevents the Define Pages Editor (and the other editors in admin?) from converting and saving the HTML "less than" and "greater than" characters (< and >) as < and > in the raw code after using the editor.
Thanks so much to Linda and others who came up with it.
-
Re: HTML tags show after upgrade to 1.3.9g
Is there any way to add the manufacturers to the white list? Currently I'm using a <br> to display the manufacturers on two lines and the update has broken it.
-
Re: HTML tags show after upgrade to 1.3.9g
Are you seeing a problem in the Catalog or in the Admin when you use:
Line 1<br>Line 2
for the Manufacturer Name? :unsure:
-
Re: HTML tags show after upgrade to 1.3.9g
Currency showing £ &euro in products price listing. Whitelist didnt help me on that one so far. anyone else know what to do on that?
All a headache now since the upgrade and now its starting to show some issues just today and all. I also saw a microsoft update on my computer recently when these issues appeared too but I was :(
Whitelist file fixed the define files though
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
choccybox
Is there any way to add the manufacturers to the white list? Currently I'm using a <br> to display the manufacturers on two lines and the update has broken it.
Please check Post #52, update for manufacturers_name ...
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
steeve86
Currency showing £ &euro in products price listing. Whitelist didnt help me on that one so far. anyone else know what to do on that?
Check Post #52, update for symbol_left and symbol_right on currencies ...
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Ajeh
Check Post #52, update for symbol_left and symbol_right on currencies ...
The problem is also happening to me, even after traying the solution on post #52, I can still see all the html content on the defined pages I changed since updating to version 1.3.9g.... privacy.
Any help would be greatly apreciated.
I have uploaded the solution on post 52 but still no change.
-
Re: HTML tags show after upgrade to 1.3.9g
Be sure that after you upload the code from post #52 that you then edit the define pages and save to have those changes applied ...
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Ajeh
Check Post #52, update for symbol_left and symbol_right on currencies ...
Quote:
Originally Posted by
Ajeh
Be sure that after you upload the code from post #52 that you then edit the define pages and save to have those changes applied ...
Thanks. Apreciated.
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Ajeh
Try using for the extra_white_list.php file:
/admin/includes/extra_configures/extra_white_list.php
and put into that file the code:
Code:
<?php
$global_xss_whitelist = isset($global_xss_whitelist) ? $global_xss_whitelist : array();
$my_whitelist = array('file_contents', 'banners_html_text', 'pages_title', 'message_html', 'manufacturers_name', 'symbol_left', 'symbol_right');
$global_xss_whitelist = array_merge($my_whitelist, $global_xss_whitelist);
and then try to edit the
Define Page or
Banner HTML or
EZPage Title or
Send Email once more and save it to see if this displays correctly ...
NOTE: the file
/admin/includes/extra_configures/extra_white_list.php
is a file that you create for this code ...
NOTE: Updated for
Manufactuers Name,
Currencies Left Symbol and
Currencies Right Symbols
did not recover my euro or gbp symbol. just so you know. :)
-
Re: HTML tags show after upgrade to 1.3.9g
Did you go back and edit the currencies and put back the proper settings and save them? :unsure:
-
Re: HTML tags show after upgrade to 1.3.9g
The extra_white page you said in post #52 doesnt exist on my server, when i go to edit the main page it shows html, here is the link (http://www.epsonto711.com/shop/) any help would be appreciated
-
Re: HTML tags show after upgrade to 1.3.9g
You have to make a file called:
/includes/extra_configures/extra_white_list.php
Paste into that file the code posted in post #52 ...
Load that file to your server ...
Now edit the things that are broken and save them ...
NOTE: on occaision you may need to clean up the content before saving, but usually just saving the information again will fix it ...
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Ajeh
You have to make a file called:
/includes/extra_configures/extra_white_list.php
Paste into that file the code posted in post #52 ...
Load that file to your server ...
Now edit the things that are broken and save them ...
NOTE: on occasion you may need to clean up the content before saving, but usually just saving the information again will fix it ...
I found out what I did wrong after all that with the currencies, it was more of a not enough sleep type of misunderstanding (missing info in instructions and not enough will power to think it through)
You must go to admin>Localization>Currencies
Edit the currency you are having the problem with. Change Euro which should appear now as"&euro;" to just "€" without quotes of course .:oops:
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Ajeh
You have to make a file called:
/includes/extra_configures/extra_white_list.php
Paste into that file the code posted in post #52 ...
Load that file to your server ...
Now edit the things that are broken and save them ...
NOTE: on occaision you may need to clean up the content before saving, but usually just saving the information again will fix it ...
Hi thanks for the quick response, i am a bit of a noob when it comes to thsi, i created a new php file in dreamweaver and entered the code as you have posted in #52, saved the file and uploaded it into , includes/extra_configures/file name.php (being extra_white of course), then gone to the define pages editor and entered my text in the main page, clicked save and it still shows the html, have i done something wrong? please do speak to me as if im stupid also btw, as im really lost with this.
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by ashjones86
created a new php file in dreamweaver and entered the code as you have posted in #52, saved the file and uploaded it
NEVER use dreamweaver to create or edit a php file
Use a PLAIN text editor like notepad, or a code editor
Some Free ones
ConText
Crimson editor
Notepad++
Upload with a good FTP client
-
Re: HTML tags show after upgrade to 1.3.9g
:smile:
Brilliant - how come this is missing from the upgrade to 1.3.9g?
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
brianinhungerford
:smile:
Brilliant - how come this is missing from the upgrade to 1.3.9g?
It will be updated in 1.3.9h version to come.
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
kobra
NEVER use dreamweaver to create or edit a php file
Why? What's wrong with Dreamweaver?
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by countrycharm
Why? What's wrong with Dreamweaver?
It's main niche is for html pages
It adds unnecessary code - - code bloat
Also it designs a html page and there are parts of it you MUST not use
-
Re: HTML tags show after upgrade to 1.3.9g
I don't know if this is important or not, but I while trying to install an add-on, HTML was being added to the database
Full details in the link below
http://www.zen-cart.com/forum/showpo...4&postcount=29
-
Re: HTML tags show after upgrade to 1.3.9g
NOTE: Check post #52 of this thread as it has been updated for fixes for the Install SQL Patch ...
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Ajeh
NOTE: Check post #52 of this thread as it has been updated for fixes for the Install SQL Patch ...
Thank you Ajeh :hug:
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
Ajeh
Try using for the extra_white_list.php file:
/admin/includes/extra_configures/extra_white_list.php
and put into that file the code:
Code:
<?php
$global_xss_whitelist = isset($global_xss_whitelist) ? $global_xss_whitelist : array();
$my_whitelist = array('file_contents', 'banners_html_text', 'pages_title', 'message_html', 'manufacturers_name', 'symbol_left', 'symbol_right', 'query_string');
$global_xss_whitelist = array_merge($my_whitelist, $global_xss_whitelist);
and then try to edit the
Define Page or
Banner HTML or
EZPage Title or
Send Email once more and save it to see if this displays correctly ...
NOTE: the file
/admin/includes/extra_configures/extra_white_list.php
is a file that you create for this code ...
NOTE: Updated for
Manufactuers Name,
Currencies Left Symbol and
Currencies Right Symbols and
Install SQL Patches
1. Has this fix been applied to the 1.3.9g download or do we have to add it every time.
2. Does this needed to be added to sites that have been upgraded to 1.3.9g also.
3. Does this always happen with 1.3.9g files?
Thanks,
C
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by countrycharm
Why? What's wrong with Dreamweaver?
Quote:
Originally Posted by
kobra
It's main niche is for html pages
It adds unnecessary code - - code bloat
Also it designs a html page and there are parts of it you MUST not use
I didn't make that post.
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
cshart
1. Has this fix been applied to the 1.3.9g download or do we have to add it every time.
2. Does this needed to be added to sites that have been upgraded to 1.3.9g also.
3. Does this always happen with 1.3.9g files?
Thanks,
C
You will have to add it until 1.3.9h comes out.
-
1 Attachment(s)
Re: HTML tags show after upgrade to 1.3.9g
Hi, I tried this, I just upgraded to 1.3.9g as well and I'm still seeing a lot of html on the preview page. I've uploaded a screen shot, does this look like the same issue to you? Thanks.
The screenshot is pretty small, so I'll add some of the code here- I wonder if it has to do with the image handler module?
<link href="file:///C:\DOCUME~1\Mel\LOCALS~1\Temp\msohtmlclip1\01\clip_filelist.xml" rel="File-List" /><link href="file:///C:\DOCUME~1\Mel\LOCALS~1\Temp\msohtmlclip1\01\clip_themedata.thmx" rel="themeData" /><link href="file:///C:\DOCUME~1\Mel\LOCALS~1\Temp\msohtmlclip1\01\clip_colorschememapping.xml" rel="colorSchemeMapping" /><!--[if gte mso 9]><xml> <w:WordDocument> <w:View>Normal</w:View> <w:Zoom>0</w:Zoom> <w:TrackMoves/> <w:TrackFormatting/> <w:PunctuationKerning/> <w:ValidateAgainstSchemas/> <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid> <w:IgnoreMixedContent>false</w:IgnoreMixedContent> <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText> <w:DoNotPromoteQF/> <w:LidThemeOther>EN-US</w:LidThemeOther> <w:LidThemeAsian>X-NONE</w:LidThemeAsian> <w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript> <w:Compatibility> <w:BreakWrappedTables/> <w:SnapToGridInCell/> <w:WrapTextWithPunct/> <w:UseAsianBreakRules/> <w:DontGrowAutofit/> <w:SplitPgBreakAndParaMark/>
-
Re: HTML tags show after upgrade to 1.3.9g
The Page Preview will be fixed in v1.3.9h ... if it looks right on the Store you should be okay ...
-
Re: HTML tags show after upgrade to 1.3.9g
I posted every code patch fix I could find and still the html code showed through (on main page), ZC 1.3.9g. So I whited out most of those define pages just to get things to work.... In searching pages (w/ TextWrangler) on how to use the SPONSORS box I discovered the following file was corrupted:
admin/editors/htmlarea/popups/about.html
Apparently the original file was not saved properly (or something similar) and the file was not recognizable to TextWrangler. Opening the file and re-typing over a single character (any will do) and saving the file fixed whatever the corruption issue was. Uploaded the newly saved 'about.html' and now everything (html rendering) seems to be working as advertised. The question now is 'Was that the problem all along?' and will the original ZC 1.3.9g upload work with this change and not all the added in code patch fixes?
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by
ray-the-otter
Why? What's wrong with Dreamweaver?
Some people here claim it ads extra white spaces , but personally i think that's crap. You just need to know how to use dreamweaver, because it is a great tool !!!
-
Re: HTML tags show after upgrade to 1.3.9g
Quote:
Originally Posted by Design75
, because it is a great tool !!!
Right up until it adds something that breaks a page and you spend untold time tracing in down to Dreamweaver
-
Re: HTML tags show after upgrade to 1.3.9g
We are getting off topic, but I think you are mistaking dreamweaver for frontpage. :P
And that's all i am going to say about it in this topic
-
Cannot use HTML in product description (v1.3.9g)
Every time I try editing my product description with HTML tags, they show up. For example, if I typed "ABC <br /> XYZ" it would show that, rather than "ABC *enter* XYZ". Could someone please help me?
I am using Zen Cart 1.3.9g.
-
Re: Cannot use HTML in product description
-
Re: Cannot use HTML in product description (v1.3.9g)
Thank you for the reply, but that did not work. The HTML tags are still showing up in my product descriptions. Just to clarify that I did the correct thing: I entered the following code into /admin/includes/extra_configures/extra_white_list.php.
Code:
<?php
$global_xss_whitelist = isset($global_xss_whitelist) ? $global_xss_whitelist : array();
$my_whitelist = array('file_contents', 'banners_html_text', 'pages_title', 'message_html', 'manufacturers_name', 'symbol_left', 'symbol_right', 'query_string');
$global_xss_whitelist = array_merge($my_whitelist, $global_xss_whitelist);
-
Re: Cannot use HTML in product description (v1.3.9g)
Are you saying it is broken in the Preview of the Admin or in the Store?
NOTE: the Preview in the Admin will still be broken until the next release of v1.3.9h ...
-
Main Picture on Home Page Not Displaying on 1.3.9g
Hi, ive just installed New Copy of Zencart 1.3.9g
On my home page i want to add a picture so i put a link in on my define page editor <div style="text-align: center;"><img src="http://mywebsite.com/images/main.jpg" /> </div>
When i click on text editor "HTMLarea" i can see the image, i than click save.
When i go to my website, it is not displaying the image but only the link. I checked the link and its right.
Cant figure out why its not working. Done this many times on other older zencart installations with no problems, this is the 1st time i have tried 1.3.9g
Hope somebody can help.
Thanks :bigups:
-
Re: Main Picture on Home Page Not Displaying on 1.3.9g
-
Re: Why shown html codes on main page?
Hi - I am brand new here. I am using Twist of Nature. When I want to edit the main page, I get a choice of Plain text or HTML. If I choose "Plain Text", I get plain text, but no page breaks. Everything just runs together. I tried html code, but it just appear in the text as typed. If I choose the HTML selection, all the html code shows when saved. Is this a bug in Twist of Nature?