X-Cart forums

[jeremye]

When I change the value of the Languages, for example changing "txt_welcome" to include the text "Welcome!" it strips out the HTML tags and only inserts "Welcome!" into the DB. I looked all over the code and can't find where it it stripping the tags. Please help!!

Thanks!

[B00MER]

globals.php

function func_strip_tags($var) {

[jeremye]

Thanks Boomer! It looks as if the func_strip_tags function is used all over the place, not just for editing language variables. So how could I manually disable the tag stripping JUST for editing language variables. I did a "grep -r 'func_strip_tags' *" in the root of the /xcart directory and it only found matches in globals.php, nothing else. That doesn't make sense to me. I couldn't find any references to this in languages.php. Any suggestions?

Thanks!

[B00MER]

Just comment out line:

$HTTP_POST_VARS[$__var] = func_strip_tags($__res);

As globals.php is included in every file. All post data is stripped of html.

[jeremye]

Worked perfectly! You the man Boomer.

Thanks so much.

[jeremye]

Just as a follow up, I found that the safe way to do this is to leave globals.php alone and at the top of languages.php, it should be:

define('USE_TRUSTED_POST_VARIABLES',1);
$trusted_post_variables = array("var_value", "new_var_value");

require "../smarty.php";
require "../config.php";
require "./auth.php";

This authorizes var_value and new_var_value as trusted post variables and will not strip the HTML tags.

[Jon]

Thanks for this post. This was baffling me.

[joshf]

Where is $trusted_post_variables defined in 4.0.x? I seem to be missing it..


jf

[jeremye]

They probably drastically changed the way they handle trusted vars, just a guess. I am still on 3.4.x stable branch, so I can't help you here. Sorry.