|
Need to Enable HTML Img Tag in 7.5 patched 3.0 -
06-03-2005, 09:53 AM
I have a need to enable the img tag in phpNUKE 7.5 patched3.0 in the Submit News module and Admin Module "Stories Approval" section.
Yes I know there is security vulnerability, but the membership in the application is tightly controlled and not open to any anonymous posting at all. I would like my users to be able to use the img tag.
I am having trouble with only one area: Submit_News.
This is what I have already done:
- Edited config.php to include img tag img,2
- Edited mainfile.php to comment out img restriction
This allowed the registered user to enter img tags in their news post and preview them... no problem with that part of the process.
The index.php file in Submit News is the Enhanced Version by NukeScripts.
There is no issue there.... I have used the original files as well and still no luck. I do NOT want to remove all of the 3.0 patched files and completely revert as I will have issues with my other modules if I do that!
The issue is with the admin approval "Stories Submission" section of the Admin module. When I am logged in as Admin and attempt to approve a news article submitted with an img tag, it is stripped out from the admin's version of the post.
From my testing it appears that the IMG code is accepted in the Submit News module but may get stripped out before or after it is written into the SQL layer. So that when the admin approal module loads it the img tags are missing though they were succesfully submitted with the tags to the admin. I am sure this was part of the security patch that would need to be modified to allow access.
Is there a patch, website, or hack that anyone can share that would allow me to enable img tags in phpNUKE 7.5 "patched" to prevent IMG tag stripping in the Admin approval module?
Could use some help with this....
thanks....
ZZB
|