[Done v1.3.9h] HTML tags show after upgrade to 1.3.9g

Using v1.3.9g ... see this post and follow each step in post #52
http://www.zen-cart.com/forum/showthread.php?t=165081

Hi, thanks for getting back to me, followed instructions in post#52, but still dont seem to work, guess iam doing something wrong.

This is what i did,

1 create the file:
/admin/includes/extra_configures/extra_white_list.php & added the code posted:

<?php
$global_xss_whitelist = isset($global_xss_whitelist) ? $global_xss_whitelist : array();
$my_whitelist = array('file_contents', 'banners_html_text', 'pages_title', 'message_html', 'manufacturers_name', 'symbol_left', 'symbol_right', 'query_string');
$global_xss_whitelist = array_merge($my_whitelist, $global_xss_whitelist);

2 FTP the file to my server

3. Went to Define main page editor and copied the same code in again:

<?php
$global_xss_whitelist = isset($global_xss_whitelist) ? $global_xss_whitelist : array();
$my_whitelist = array('file_contents', 'banners_html_text', 'pages_title', 'message_html', 'manufacturers_name', 'symbol_left', 'symbol_right', 'query_string');
$global_xss_whitelist = array_merge($my_whitelist, $global_xss_whitelist);


Clicked save, checked my website & it still showing:
<?php $global_xss_whitelist = isset($global_xss_whitelist) ? $global_xss_whitelist : array(); $my_whitelist = array('file_contents', 'banners_html_text', 'pages_title', 'message_html', 'manufacturers_name', 'symbol_left', 'symbol_right', 'query_string'); $global_xss_whitelist = array_merge($my_whitelist, $global_xss_whitelist); <div style="text-align: center;"><img src="http://mywebsite.com/images/main.jpg" />

Hope somebody can help, as this is driving me crazy.

Thanks :bigups:

Hello guys! I just wanted to ask what's going on when my banner stopped rendering but instead showed up the html code. what i did was went to the EZ pages and edited the define_main_page but i undid it but still the banner wont render.

if you have time, kindly please check my store here.
thanks very much!

Quote:

---

Originally Posted by mayleine

Hello guys! I just wanted to ask what's going on when my banner stopped rendering but instead showed up the html code. what i did was went to the EZ pages and edited the define_main_page but i undid it but still the banner wont render.

if you have time, kindly please check my store here.
thanks very much!

---

check this post ( www.zen-cart.com/forum/showpost.php?p=941839&postcount=52 )

Do not do what you did in step 3 ... you do not copy this code into your define page ... you only create the file:
/admin/includes/extra_configures/extra_white_list.php

with the code in it and load that to your site ...

Then, use your define page as you normally do ... you just need to edit what you put in there and save it so that it fixes itself ...

i followed the direction and created that file, i lost all of my admin so i removed it again. i got the admin back but not the define_main_page. when i click that, all i see is blank empty space.:shocking:

Hi, thanks for getting back to me :bigups:

So i left step 3 out & uploaded my picture up & saved, when i check in it still showing:

<div style="text-align: center;"><img src="http://mywebsite.com/images/main.jpg" /><br /> </div>

:frusty::frusty::frusty:

anyway, thanks for pointing me to that post clydejones. what i need to do is sharpen my common sense a bit. hehe. i will figure it out from all the posts there. :flex:

Ok! I finally got it resolved! I reached the point of frustration because even though I carefully followed Linda's patch in that post above, i didnt give importance to item # 4 where she said

"4. edit the section where you have the problem and save/update it to correct the issue"

because I already made sure what i put there was deleted. So just to follow the 1-2-3-4 items on that post and follow the commandments of the gods, what I did was literally TOUCH the file again in that define_main_page. I
1) added a random space anywhere in the file and
2) hit backspace to undo that space i added
3) hit Save.

I wasnt expecting anything but VIOLA, my banners are resurrected!!! :clap:

Thanks to the Zen cart team! ;)

Go to your Admin and in the Tools ... Developers Tool Kit ... do a search in the bottom input box for:
$my_whitelist

and select Admin and click search ...

Do you see the file:
/admin/includes/extra_configures/extra_white_list.php

in the list of files?

NOTE: the /admin would be a different directory name to match your secret /admin directory name that you are of course using ...