HTML tags in configuration fields

[zcfan]

Hi,

I recently updated from 1.5.1 to 1.5.6c and noticed i cant update my configuration fields content from the admin area.
In Configuration - My Store menu i used html content (url and more) in some fields but now after save this content change

< symbol changed to &lt; and > to &gt;

and the store front shows it as plain text not as html so the url in the text does not work just swows as a simple text.

Bigest problem i want to use some js code in that field and with <script> in the content save process break with an error.
"Not Acceptable! An appropriate representation of the requested resource could not be found on this server. This error was generated by Mod_Security."

I use TM temlate and it has custom block where i want to use html and jquery in the content block. I set zen_cfg_textarea( in set_function field in configuration table and transform the input field to textare but the html code breaks too.

How can i override this? Thanks for any help!

[dbltoe]

That was fixed in 1.5.1 and, supposedly, fixed again in 1.5.5a. You might want to check the files in this thread against the same on your site.

[swguy]

I think this is still a bug.

[swguy]

Yep, still a problem. Issue entered:
https://github.com/zencart/zencart/issues/2794

[Jeff Crawford]

I am also having this problem in the Configuration - E-Mail Options - Send Copy of Order Confirmation Emails To screen. For example when entering email addresses for Copy of Order Confirmation, Fred Smith <[email protected]> turns into Fred Smith &lt;[email protected]&gt; It does this on all E-Mail configuration fields.

I have ZenCart Version: v1.5.6c and PHP Version: 7.4 on Bluehost.

I discovered this several months ago when I stopped receiving copies of order confirmation emails. I can set it back the way it should be and they change instantly when I click update. The strange part is that I will receive the next copy of the order confirmation email and then stop receiving them.

Any suggestions for a work around or fix would be greatly appreciated.

[swguy]

@JeffCrawford you need to update; this is fixed in 1.5.7.

[mc12345678]

Understand also that there are countless threads in the forum about this topic which could be followed to temporarily restore email functionality while also working on the upgrade.

The issue comes down to that there is code that was incorporated to sanitize entries made from the admin. That code was indiscriminate about such characters in an email address (a field expected to have characters such as < and >). Because code makes those changes to the data going into the database, a temporary fix is to directly write to the database the content desired or needed.

Again, the site should be upgraded, but that shouldn't also prevent the site from functioning or making money.