X-Cart forums

[tqualizerman]

Hi,

I've been customizing the detailed images mod on a 4.4.5 build with some custom text fields, for which I'd like to be able to do some styling within but every time I apply changes the tags are stripped and only the plain text is saved.

Here's on example from my product_images_modify.tpl:

<td class="DataTable"><input type="text" size="32" name="image[{$images[image].imageid}][label]" value="{$images[image].label|strip_tags:false|escape}" style="width:100%" /></td>

Based on that I don't think the stripping is happening within this file but I'm not sure where to look. Does anyone have an idea where I might be able to control this so my custom fields don't get stripped of their stylings?

[cflsystems]

You have to add any fields that will contain html tags to trusted variables array - $trusted_post_variables

[tqualizerman]

I looked through several files but could only find that in a few (none had any effect though.)

Do you know which file I should be looking at?

[cflsystems]

This module may not have one if it was not needed. You can always add it to the php file used to save the detailed images info

[tqualizerman]

Thanks - I tried adding this code with my custom variables (which are working correctly):

define('USE_TRUSTED_POST_VARIABLES', true);
define('USE_TRUSTED_SCRIPT_VARS', true);

$trusted_post_variables = array(
'alt',
'label',
);

to modules/Detailed_Product_Images/config.php (as well as product_images_modify.php and product_images.php when that didn't work.) Unfortunately none of that did the trick either (cleared cache each time.)

Am I missing something maybe?

[cflsystems]

It has to be to the file saving that info the database

[tqualizerman]

I expect that the file is product_images_modify.php and product_images.php - but unfortunately that doesn't seem to be working. Is there a chance it might be another PHP file?