Normally I don't mind if the admin wants to re write the HTML code in the description box but I was Horrified to find my IMG links in HTML were re written to show the location of my admin.
It went from:
www.mysite.com/images.myimg.jpg
to:
www.mysite.com/adminlocation/images/myimg.com
This is a security risk! If i didn't catch it anyone could have looked at the src of the broken img and gleaned my admin location.
any thoughts?
Nadia
Results 1 to 10 of 11
-
13 Jul 2011, 11:36 PM #1
New Zenner
- Join Date
- Sep 2008
- Location
- Los Angeles, CA
- Posts
- 82
- Plugin Contributions
- 0
Admin automatically re-writes the description html code
-
14 Jul 2011, 03:36 AM #2
Sensei
- Join Date
- Jan 2004
- Posts
- 66,450
- Plugin Contributions
- 81
Re: Admin automatically re-writes the description html code
That's a consequence of some webbrowser-based HTML editors.
Safer to enter the HTML by hand.
Or use a different editor that doesn't do that..
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
-
14 Jul 2011, 03:50 AM #3
New Zenner
- Join Date
- Sep 2008
- Location
- Los Angeles, CA
- Posts
- 82
- Plugin Contributions
- 0
Re: Admin automatically re-writes the description html code
I used the HTML option in zencart to enter HTML in the description box. U sed the HTML toggle to enter the code by hand.
It worked fine. Then I revisited the product without touching the code and re saved and updated. Thats when it decided to re write my code. I guess it tried to validate or it wasnt happy that it cant populate the images in a table if the link is not pointing to the admin's IMAGES folder. I had all imaged pointing correctly to the main IMAGES folder.
I wouldnt mind using another editor...any advice on FTPing the description field.
-
14 Jul 2011, 03:54 AM #4
Sensei
- Join Date
- Jan 2004
- Posts
- 66,450
- Plugin Contributions
- 81
Re: Admin automatically re-writes the description html code
There are a few in the Addons area. Whether they do what you want is something you'll need to check out for yourself.
Originally Posted by NadiaUSA
Not a built-in option, since FTP deals with files, and your products are stored in database records, not in separate files. Originally Posted by NadiaUSA
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
-
14 Jul 2011, 04:01 AM #5
New Zenner
- Join Date
- Sep 2008
- Location
- Los Angeles, CA
- Posts
- 82
- Plugin Contributions
- 0
Re: Admin automatically re-writes the description html code
It should be a security patch that when it validated the HTML it is forbiden from ever disclosing the admin url. For instance it should not comply with a request to link to images in the admin's IMAGE folder without perhaps scrambling the url like in the product download pub folder.
-
14 Jul 2011, 04:11 AM #6
Sensei
- Join Date
- Jan 2004
- Posts
- 66,450
- Plugin Contributions
- 81
Re: Admin automatically re-writes the description html code
We've fixed that in the next upcoming version ... by removing that old outdated HTMLarea editor altogether. You can do the same yourself by deleting it from your /editors/ folder.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
-
14 Jul 2011, 04:13 AM #7
New Zenner
- Join Date
- Sep 2008
- Location
- Los Angeles, CA
- Posts
- 82
- Plugin Contributions
- 0
Re: Admin automatically re-writes the description html code
When can I get my hands on that Beta?
-
14 Jul 2011, 04:35 AM #8
Sensei
- Join Date
- Jan 2004
- Posts
- 66,450
- Plugin Contributions
- 81
Re: Admin automatically re-writes the description html code
When it's ready.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
-
14 Jul 2011, 04:40 AM #9
New Zenner
- Join Date
- Sep 2008
- Location
- Los Angeles, CA
- Posts
- 82
- Plugin Contributions
- 0
Re: Admin automatically re-writes the description html code
Ok, put me on the beta list if one is available please.
-
14 Jul 2011, 04:42 AM #10
Sensei
- Join Date
- Jan 2004
- Posts
- 66,450
- Plugin Contributions
- 81
Re: Admin automatically re-writes the description html code
Subscribe yourself to the News and Announcements section of the forum if you want notification.
In the meantime you have other options as mentioned..
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
Reply With Quote
Similar Threads
-
v151 admin, I put html code at product description, but it shows text format at front page
By peter888 in forum Templates, Stylesheets, Page LayoutReplies: 23Last Post: 16 Dec 2013, 02:15 PM -
v151 admin, I put html code at product description, but it shows text format at front page
By peter888 in forum General QuestionsReplies: 2Last Post: 14 Dec 2013, 05:49 PM -
HTML code in Product Description
By irishshopper in forum Templates, Stylesheets, Page LayoutReplies: 5Last Post: 15 Apr 2010, 01:51 AM -
Ezpages and HTML... links added via HTMl add "admin" to the link automatically
By aperfecthost in forum General QuestionsReplies: 2Last Post: 22 Aug 2009, 06:07 PM -
strange html code in product description
By nilsen in forum General QuestionsReplies: 0Last Post: 31 Jan 2009, 11:09 PM
