Codezwiz >> Forums >> General PHP Nuke Help >> html tags not allowed :(

I've made an upgrade from 6.9 to 7.0. When i want to add or edit some article in Sections or Contents module, message shows: The html tags you attempted to use are not allowed . Where is the problem? Where do i have to put these tags?

Which type of html tags are you using?? sometimes you will find that only the very basic tags are allowed.

one wrong type of tag can void the whole article.

I delete this line in mainfile.php. Now it work!

foreach ($_GET as $secvalue) {
if ((eregi("<[^>]*script*\"?[^>]*>", $secvalue)) ||
(eregi("<[^>]*object*\"?[^>]*>", $secvalue)) ||
(eregi("<[^>]*iframe*\"?[^>]*>", $secvalue)) ||
(eregi("<[^>]*applet*\"?[^>]*>", $secvalue)) ||
(eregi("<[^>]*meta*\"?[^>]*>", $secvalue)) ||
(eregi("<[^>]*style*\"?[^>]*>", $secvalue)) ||
(eregi("<[^>]*form*\"?[^>]*>", $secvalue)) ||
(eregi("$[^>]*\"?[^)]*$", $secvalue)) ||
(eregi("\"", $secvalue))) {
die ("<center><img src=images/logo.gif> The html tags you attempted to use are not allowed [ <a href=\"javascript:history.go(-1)\">Go Back</a> ]");
}
}

foreach ($_POST as $secvalue) {
if ((eregi("<[^>]*script*\"?[^>]*>", $secvalue)) || (eregi("<[^>]*style*\"?[^>]*>", $secvalue))) {
die ("<center><img src=images/logo.gif> The html tags you attempted to use are not allowed [ <a href=\"javascript:history.go(-1)\">Go Back</a> ]");
}
}

While you may have solved the immediate problem, you may have just opened your site up to a major security problem. Those limitations are written in there to keep people from posting harmful scripts into your forums. I don't know much about how to hack websites or anything, but I'm sure you're doing more harm than good here. I'd put them back if I were you and figure out the real problem.

Kelly

I agree.....your doing more harm then good man...save yourself the time an the headache and find the real promblem