Bug in the subtitle field of Content module

Worker Joined: Jul 20, 2004 Posts: 189 Location: Italy

I have installed the RavenNuke7.6 v2.02.02 but I have a problem that I am not able to resolve.

I have made 2 topics in the nukefixes and nukeforums forums.

Evaders99 will not help me.

Following the link of my 2 topics.

http://www.nukefixes.com/modules.php?name=Forums&file=viewtopic&p=9404#9404
http://www.nukeforums.com/forums/viewtopic.php?p=72097#72097

Thanks in advance for your assistance.

Regards

registered · Site Admin Joined: Jun 04, 2004 Posts: 6437

Evaders99 is a moderator here, and has contributed much to helping many, including on RavenNuke, so I'm surprised to hear that. Looking at your posts, it appears that he did try to help you.

You can control the valid HTML tags by editing your config.php file. If you use nukeWYSIWYG (which is included as an addon in RavenNuke 2.02.02), you have even greater control over the possible HTML tags.

You might also need to comment out or delete the line Evaders refers to in mainfile.php.

If you enter invalid HTML, the check_html function strips it out, which is why your popup wouldn't run.

Does that make sense?

Posted: Thu Jun 15, 2006 5:14 am

Please, how I must edit the config.php file ?

Posted: Thu Jun 15, 2006 7:34 am

There is a line in your config.php file that defines a variable called $allowable_html. You can see the details in Only registered users can see links on this board! Get registered or login!.

How is your $allowable_html defined in your config.php?

Posted: Wed Jun 21, 2006 4:14 am

Following the config.php file:

<?php

if (stristr(htmlentities($_SERVER['PHP_SELF']), "config.php")) {
Header("Location: index.php");
die();
}

$dbhost = "***********";
$dbuname = "***********";
$dbpass = "***********";
$dbname = "***********";
$prefix = "nuke";
$user_prefix = "nuke";
$dbtype = "MySQL";
$sitekey = "*************************";
$gfx_chk = 0;
$subscription_url = "";
$admin_file = "admin";
$tipath = "images/topics/";
$display_errors = FALSE; //This should only be used (set to TRUE) when testing locally and not in a production environment

$bypassNukeSentinelInvalidIPCheck = FALSE; //This should only be used (set to TRUE) when testing locally and not in a production environment
$bypassInstallationFolderCheck = FALSE; //This should only be used (set to TRUE) when testing locally and not in a production environment

$reasons = array("As Is","Offtopic","Flamebait","Troll","Redundant","Insighful","Interesting","Informative","Funny","Overrated","Underrated");
$badreasons = 4;
$AllowableHTML = array("b"=>1,"i"=>1,"u"=>1,"div"=>2,"a"=>2,"em"=>1,"br"=>1,"strong"=>1,"blockquote"=>1,"tt"=>1,"li"=>1,"ol"=>1,"ul"=>1);
...

Posted: Wed Jun 21, 2006 6:37 am

That should work (I removed the sitekey from your post as that would allow others to attack your site).

As evaders suggested in the post on NukeFixes, there is an edit in the mainfile that is removing the onclick tag.

Code:

$str = eregi_replace("<a[^>]*href[[:space:]]*=[[:space:]]*\"?[[:space:]]*([^\" >]*)[[:space:]]*\"?[^>]*>",'<a href="\\1">', $str);

Although you could comment out that line, you might be opening yourself up to bad HTML that could be used to to harm your site or visitors. You could edit it to allow the onlick tag, but that's more than I have time to do right now...

Posted: Wed Jun 21, 2006 9:12 am

Sorry! I modified the files but the popup not run.

Posted: Wed Jun 21, 2006 9:26 am

What happens?

Posted: Thu Jun 22, 2006 11:38 pm

Please go to:

http://www.guitaronline.it/modules.php?name=Content&pa=list_pages_categories&cid=19

http://www.guitaronline.it/modules.php?name=Content&pa=showpage&pid=56

You can see the link on the word:

(for guitar and violin) - Open Part's First Pages

When you click the link open a popup.

To make it I have inserted:

for guitar and violin - <a href="parti/molitorop3.html" onclick="NewWindow(this.href,''name'',''365'',''525'',''yes'');return false;">Open Part''s First Pages</a>

in the subtitle field of the content module

and the code:

echo "
<SCRIPT LANGUAGE="JavaS cript">
function NewWindow(mypage, myname, w, h, scroll) {
var winl = (screen.width - w) / 2;
var wint = (screen.height - h) / 2;
winprops = 'height='+h+',width='+w+',top='+wint+',left='+winl+',scrollbars='+scroll+',resizable'
win = window.open(mypage, myname, winprops)
if (parseInt(navigator.appVersion) >= 4) { win.window.focus(); }
}
</scr ipt>\n";

in the includes/javascript.php files

The phpnuke version is 7.5 pached 2.6

With all other version the pop up not run.

Please go to:

http://www.cubmi.it/consrc_nuke/modules.php?name=Content&pa=list_pages_categories&cid=19

http://www.cubmi.it/consrc_nuke/modules.php?name=Content&pa=showpage&pid=56

Under Allegro moderato (Header Text field) the pop up is only a link that go target_top

Regards.

Posted: Fri Jun 23, 2006 12:06 am

The correct code is:

for guitar and violin - <a href="parti/molitorop3.html" onclick="NewWindow(this.href,'name','365','525','yes');return false;">Open Part's First Pages</a>

Under Allegro moderato (Header Text field) the popup today run well.

http://www.cubmi.it/consrc_nuke/modules.php?name=Content&pa=showpage&pid=56

The problem is only in the subtitle field.

Posted: Fri Jun 23, 2006 12:51 am

I think that if the popup run well in the Header Text field the problem is not in the $AllowableHTML function.

I think it is in the table structure of the subtitle field.

Posted: Fri Jun 23, 2006 7:56 pm

I know kguske is limited in time so ill throw my 2 cents in.

Its being called on twice.

This may be your problem.
Not sure where its callin in the second time from.

Posted: Sat Jun 24, 2006 5:43 am

Did you remove it from the subtitle field? It could be that the subtitle field doesn't have enough space to store the full link.

Posted: Sat Jun 24, 2006 7:56 am

In the version 7.5 pached 2.6 the popup run correctly.

See:

http://www.guitaronline.it/modules.php?name=Content&pa=showpage&pid=56

Posted: Sun Jun 25, 2006 2:38 am

I think the problem is in the new pach.

Regular Joined: Mar 26, 2006 Posts: 87 Location: UK

I don't know if your issue has been fixed, but the popups work for me on both links in both Firefox and IE.

Posted: Sun Jun 25, 2006 11:27 pm

The link there is not in the subtitle field. See the text line under Grande Sonata ......

http://www.cubmi.it/consrc_nuke/modules.php?name=Content&pa=showpage&pid=56

Posted: Mon Jun 26, 2006 12:34 am

Other popup test with Php Nuke 7.6 pach 2.6.

Go to:

http://www.ibmi.it/modules.php?name=Content&pa=showpage&pid=30

The first popup, in the subtitle field, not run.

Under, the 2nd and the 3th work well.