[Done v1.3.9h] HTML tags show after upgrade to 1.3.9g

Ajeh:

Try using for the extra_white_list.php file:
/admin/includes/extra_configures/extra_white_list.php

and put into that file the code:

<?php $global_xss_whitelist = isset($global_xss_whitelist) ? $global_xss_whitelist : array(); $my_whitelist = array('file_contents', 'banners_html_text', 'pages_title', 'message_html'); $global_xss_whitelist = array_merge($my_whitelist, $global_xss_whitelist); ``` > > and then try to edit the **Define Page** or **Banner HTML** or **EZPage Title** or **Send Email** once more and save it to see if this displays correctly ... > > NOTE: the file > /admin/includes/extra_configures/extra_white_list.php > > is a file that you create for this code ... thank you..it work very well

I don't know enough about programming code to understand it, but that patch (post #52) sure worked beautifully.

It prevents the Define Pages Editor (and the other editors in admin?) from converting and saving the HTML "less than" and "greater than" characters (< and >) as < and > in the raw code after using the editor.

Thanks so much to Linda and others who came up with it.

Is there any way to add the manufacturers to the white list? Currently I'm using a <br> to display the manufacturers on two lines and the update has broken it.

Are you seeing a problem in the Catalog or in the Admin when you use:
Line 1<br>Line 2

for the Manufacturer Name? :unsure:

Currency showing £ &euro in products price listing. Whitelist didnt help me on that one so far. anyone else know what to do on that?

All a headache now since the upgrade and now its starting to show some issues just today and all. I also saw a microsoft update on my computer recently when these issues appeared too but I was :(
Whitelist file fixed the define files though

choccybox:

Is there any way to add the manufacturers to the white list? Currently I'm using a <br> to display the manufacturers on two lines and the update has broken it.

Please check Post #52, update for manufacturers_name ...

steeve86:

Currency showing £ &euro in products price listing. Whitelist didnt help me on that one so far. anyone else know what to do on that?

Check Post #52, update for symbol_left and symbol_right on currencies ...

Ajeh:

Check Post #52, update for symbol_left and symbol_right on currencies ...

The problem is also happening to me, even after traying the solution on post #52, I can still see all the html content on the defined pages I changed since updating to version 1.3.9g.... privacy.

Any help would be greatly apreciated.

I have uploaded the solution on post 52 but still no change.

Be sure that after you upload the code from post #52 that you then edit the define pages and save to have those changes applied ...

Ajeh:

Check Post #52, update for symbol_left and symbol_right on currencies ...

Ajeh:

Be sure that after you upload the code from post #52 that you then edit the define pages and save to have those changes applied ...

Thanks. Apreciated.

Ajeh:

Try using for the extra_white_list.php file:
/admin/includes/extra_configures/extra_white_list.php

and put into that file the code:

<?php $global_xss_whitelist = isset($global_xss_whitelist) ? $global_xss_whitelist : array(); $my_whitelist = array('file_contents', 'banners_html_text', 'pages_title', 'message_html', 'manufacturers_name', 'symbol_left', 'symbol_right'); $global_xss_whitelist = array_merge($my_whitelist, $global_xss_whitelist); ``` > > and then try to edit the **Define Page** or **Banner HTML** or **EZPage Title** or **Send Email** once more and save it to see if this displays correctly ... > > NOTE: the file > /admin/includes/extra_configures/extra_white_list.php > > is a file that you create for this code ... > > **NOTE: Updated** for **Manufactuers Name**, **Currencies Left Symbol** and **Currencies Right Symbols** did not recover my euro or gbp symbol. just so you know. :)

Did you go back and edit the currencies and put back the proper settings and save them? :unsure:

The extra_white page you said in post #52 doesnt exist on my server, when i go to edit the main page it shows html, here is the link (http://www.epsonto711.com/shop/) any help would be appreciated

You have to make a file called:
/includes/extra_configures/extra_white_list.php

Paste into that file the code posted in post #52 ...

Load that file to your server ...

Now edit the things that are broken and save them ...

NOTE: on occaision you may need to clean up the content before saving, but usually just saving the information again will fix it ...

Ajeh:

You have to make a file called:
/includes/extra_configures/extra_white_list.php

Paste into that file the code posted in post #52 ...

Load that file to your server ...

Now edit the things that are broken and save them ...

NOTE: on occasion you may need to clean up the content before saving, but usually just saving the information again will fix it ...

I found out what I did wrong after all that with the currencies, it was more of a not enough sleep type of misunderstanding (missing info in instructions and not enough will power to think it through)

You must go to admin>Localization>Currencies
Edit the currency you are having the problem with. Change Euro which should appear now as"€" to just "€" without quotes of course .:oops:

Ajeh:

You have to make a file called:
/includes/extra_configures/extra_white_list.php

Paste into that file the code posted in post #52 ...

Load that file to your server ...

Now edit the things that are broken and save them ...

NOTE: on occaision you may need to clean up the content before saving, but usually just saving the information again will fix it ...

Hi thanks for the quick response, i am a bit of a noob when it comes to thsi, i created a new php file in dreamweaver and entered the code as you have posted in #52, saved the file and uploaded it into , includes/extra_configures/file name.php (being extra_white of course), then gone to the define pages editor and entered my text in the main page, clicked save and it still shows the html, have i done something wrong? please do speak to me as if im stupid also btw, as im really lost with this.

ashjones86:

created a new php file in dreamweaver and entered the code as you have posted in #52, saved the file and uploaded it
NEVER use dreamweaver to create or edit a php file

Use a PLAIN text editor like notepad, or a code editor

Some Free ones
ConText
Crimson editor
Notepad++

Upload with a good FTP client

:smile:
Brilliant - how come this is missing from the upgrade to 1.3.9g?

brianinhungerford:

:smile:
Brilliant - how come this is missing from the upgrade to 1.3.9g?

It will be updated in 1.3.9h version to come.

kobra:

NEVER use dreamweaver to create or edit a php file

Why? What's wrong with Dreamweaver?