Trying to us html in a define... HELP PLEASE!

[Feznizzle]

When I use quote marks ( " ) in a define, the quote turn into unicode ( ").

I added this as my defined HEADER_SEARCH_BUTTON in includes/languages/english/MY_TEMPLATE/header.php:
<i class="fa fa-search" aria-hidden="true"></i>&nbsp;Search

When I load the page and check source, finding this:
<i class=&quot;fa fa-search&quot; aria-hidden=&quot;true&quot;></i>&nbsp;Search

Can somebody tell me how to escape those quotes? Or is that not my issue?

++++
In case you want to see what it does, check the search button on the right of my top blue bar:
https://002mc.justmedical.biz/Produc...-Test-1-Images

[Feznizzle]

Headed in the right direction... ?

I changed this:
define('HEADER_SEARCH_BUTTON','<i class="fa fa-search" aria-hidden="true"></i>&nbsp;Search');

To this:
define('HEADER_SEARCH_BUTTON',print '<i class="fa fa-search" aria-hidden="true"></i>&nbsp;Search');

Seemed helpful-ish.

[mc12345678]

Why not try instead of "
To use \"

[Feznizzle]

I'm pretty sure my define is getting cleaned. Even when I escape the quote mark ( \" ), I wind up with ( \&quot; ).

Using "print" is the closest I've gotten. When I do that, the icon I want shows up, but it's at the very top of the screen and cannot be touched. Also the print default value of "1" shows up in the search box.

I'll leave it like that for a while, I guess. I enlarged it to make it easier to see. But you have to look at the upper left corner of the page to see the icon. And you can see the number "1" on the button to the right of the search input box.

[Feznizzle]

MC, I can put that escaped define back in if you want.

But this is what it yields:
<i class=\&quot;fa fa-search\&quot; aria-hidden=\&quot;true\&quot;></i>&nbsp;Search

[Feznizzle]

Btw, I've used that trick ( \" ) effectively in this EXACT cart. But that was for a language file in the admin.

What I'm thinking is that there must be a cleaner in place, just in case folks try to use bad characters in the catalog language defines. I just need to figure out what's calling that and kill it!

[Feznizzle]

Small victory: I just managed to insert a symbol into a product description by inserting the call ( <i class="fa fa-search fa-5x" aria-hidden="true"></i> ) directly into the database (rather than using the admin product update page).

https://002mc.justmedical.biz/Produc...-Test-1-Images

[mc12345678]

Btw, I've used that trick ( \" ) effectively in this EXACT cart. But that was for a language file in the admin.

What I'm thinking is that there must be a cleaner in place, just in case folks try to use bad characters in the catalog language defines. I just need to figure out what's calling that and kill it!

But this is also a language file, no? Thought we were talking about trying to use standard HTML in the language header define HEADER_SEARCH_BUTTON which when I did a search for that I didn't find on a standard ZC install that the define was even used in the common/header.php file on the store side. What that means is that yes where it is being used as the output it is being sanitized by the display code.

Now as for entering data in the admin and it being sanitized? Yes there is expected to be a level of that performed and what/how it is sanitized depends on the field and how it is used. The thing is, the sanitization is intended to offer a level of protection by not storing some items as raw html in the database as a security measure.

[idtags]

Small victory: I just managed to insert a symbol into a product description by inserting the call ( <i class="fa fa-search fa-5x" aria-hidden="true"></i> ) directly into the database (rather than using the admin product update page).

https://002mc.justmedical.biz/Produc...-Test-1-Images

Can you please share how did you replace word "search" withAttachment 17536

Thank you.

[davewest]

I added this as my defined HEADER_SEARCH_BUTTON in includes/languages/english/MY_TEMPLATE/header.php:
<i class="fa fa-search" aria-hidden="true"></i>&nbsp;Search

To go back to your question.. CSS button relies on the ALT define not the button image define.. If for some reason like the CSS failed or you needed to switch back, then the button image is used. I found for buttons within forms, I had to use the font number and for links the html tags and class.

define('BUTTON_SEARCH_ALT', ' Search');

define('BUTTON_CREATE_ACCOUNT_ALT', '<i class="fa fa-user-plus"></i>  Sign Up');

I also had to edit html_output.php to kill the js switch in forms..

$css_button_js .= '';   // 'onmouseover="this.className=\''. $mouse_over_class . '\'" onmouseout="this.className=\'' . $mouse_out_class . '\'"'; 

But that could be just the way I have CSS buttons set-up.. I don't like the standard box look..