[Done v1.3.9h] HTML tags show after upgrade to 1.3.9g

I can't see any example of that on your site.

Yes, the site was being reveiwed for a gateway so I had to put the text into a banner so they could see a complete site.

The HTML version I had showed the banner and the text but instead after the upgrade, below is exactly what was showing in place of the banner with the 3 shirts across the top when I use HTML instead of the banner image.

<table width="100%" border="0" cellspacing="0" cellpadding="0">
  
  <tr>
    <td valign="top"><div align="center"><img src="daisy1.jpg" width="950" height="280" /></div></td>
  </tr>
  <tr>
    <td width="85%" valign="top"><p><strong>The Daisy Girls Beginning</strong><br />
    </p>
      <p></p>
    <p>Daisy Girls wants to promote positive messaging to women and girls that wear the shirts and to the 

people that read them. This line of t-shirts not only gives a positive message; they also inspire and 

motivate you to live the message or as we like to say at Daisy Girls, "Be" the shirt.<br>
      <br>
    </p>
    <p><strong>Quality Shirts</strong></p>
    <p>Daisy Girls shirts are made for women and girls who want a perfect fitting t-shirt with a subtle 

positive message.  Our shirts are made of a super soft, ring-spun cotton AND made in the USA. Let's just 

say that our Daisy Girls t-shirts are like the girls and women who wear them.... Soft, but durable. 

Feminine, but strong. Females of all sizes, shapes and ages will quickly find the Daisy Girls t-shirts to 

be their favorite t-shirts.<br>
      <br>
    </p>
    <p>Women are the strongest force on the planet. I don't know about you, but I am <strong>NOT</strong> 

a "Princess", a "Gold digger", or a "Spoiled Brat". We can do better than that. Buy a shirt, spread the 

word, and let's motivate women and girls to be their best!    <hr /></td>
  </tr>
  
  
</table>

It is not interperting the HTML and displaying the output. It is showing the actual html code. It was not doing this before upgrading.

Be sure that you applied the fix that I posted concerning both the define pages and banners ...

What you posted appears to work fine on my site ...

NOTE: be sure after adding the fix that you EDIT the broken banner and just save it to fix it ...

I tried to find a solution in the other forums but im having a hard time. I just upgraded to the most recent zencart today and now i am getting html code in my emails if i use html. It was working find before upgrading today. Can anyone give a solution to the problem.

Can you elaborate on what "html code in my emails" you're seeing?

This is a sample text i was trying to send:

Rich Text Message:

Text-Only Message:

when the email goes through this is what i get html code

Please i need help, is there a file i need to fix or something, what could cause html code to appear in the actual emails.

I installed 139g (new install) and have the same html tags issue

I created: extra_white_list.php

in it I put:

Be sure you uploaded to the admin/includes/extra_configure folder - I boobooed at first and put it in the catalog side.

Code works great. Thank you!

But html codes ( <br /><br />) are showing when sending Newsletter and emails.

I need help to resolve this problem, i have been looking through the threads and have not found a solution yet.

I upgraded to v1.3.9g from v1.3.9f yesterday, and when i did my emails in nowing showing html code in the final product for example

when the email comes through it shows:

in the actual email

i had to switch to text email, but i prefer html so i can send out pictures. Is there a file i can upload again to fix the rich text html editor from showing the code in the actual email.

NOTE: v1.3.9h has been released, which FIXES the issue, and makes the following workaround UNNECESSARY. The best solution is to upgrade.

Try using for the extra_white_list.php file:
/admin/includes/extra_configures/extra_white_list.php

and put into that file the code:

<?php
$global_xss_whitelist = isset($global_xss_whitelist) ? $global_xss_whitelist : array();
$my_whitelist  = array('file_contents', 'banners_html_text', 'pages_title', 'message_html', 'manufacturers_name', 'symbol_left', 'symbol_right', 'query_string');
$global_xss_whitelist = array_merge($my_whitelist, $global_xss_whitelist); 

and then try to edit the Define Page or Banner HTML or EZPage Title or Send Email once more and save it to see if this displays correctly ...

NOTE: the file
/admin/includes/extra_configures/extra_white_list.php

is a file that you create for this code ...

NOTE: Updated for Manufactuers Name, Currencies Left Symbol and Currencies Right Symbols and Install SQL Patches

Steps to use the above code:
1 create the file:
/admin/includes/extra_configures/extra_white_list.php

2 add the code posted above

3 FTP the file to your server

4 edit the section where you have the problem and save/update it to correct the issue

Linda, You are the best! :smile: Thank you!

Yes, I'm seeing the same thing in emails if you use Mime email true.

I've applied the patch and it works for the other pages, but now the HTML emails are not working.

Any patch for that?

Also, in the patch code is the ending ?> purposely left off?

Thank You!!!

the extra_white_list.php file, resolved the issue with the email :smile:

azimpact:

Also, in the patch code is the ending ?> purposely left off?
That is fine, the closing php tag is not required

All my issues are now fixed.

I was using the first code that was posted so I was having issues but once I added the last code posted things are working good again.

Thanks for the patch!

Ajeh:

NOTE: the file
/admin/includes/extra_configures/extra_white_list.php

is a file that you create for this code ...

I just created this file using the exact code you have above and uploaded to the folder specified. My site won't load at all now. Admin still works, but the main site no longer renders at all: https://www.plrnichemart.com

acpaulley:

I just created this file using the exact code you have above and uploaded to the folder specified. My site won't load at all now. Admin still works, but the main site no longer renders at all: https://www.plrnichemart.comMaking the changes discussed in this thread can't break the storefront, since they're only applicable to the admin side.

You must have something else wrong in your storefront files.
ref: https://www.zen-cart.com/tutorials/index.php?article=82