disable/enable WYSIWYG

thomask · Post by **thomask** » Wed May 30, 2007 8:19 am

i'am using the new myFAQ 2.1 dev and want to put off the wysiwyg, is this possible? i want to use simple textareas to show my content and the wysi editor creates html tags into my text :/

Post by **Thorsten** » Wed May 30, 2007 8:41 am

Hi,

currently there's no built-in option to disable the editor component but we could add this. Why don't you like the editor?

bye
Thorsten

thomask · Post by **thomask** » Wed May 30, 2007 9:39 am

i am using your FAQ like a pure textcontainer.

i edited the artikel.tpl so the maincontent comes out as a textareafield, but the createEntry functions is putting HTML tags into the text and DB

Post by **Thorsten** » Wed May 30, 2007 9:40 am

Hi,

you have to disable the Editor in admin/header.php

bye
Thorsten

thomask · Post by **thomask** » Wed May 30, 2007 9:57 am

cool, got it. thanks

thomask · Post by **thomask** » Wed May 30, 2007 12:51 pm

could you give me a hint to find the function putting/sorting HTML tags into the DB? i need to get some HTML code into the DB and the FAQ cut it off (f.e. the title and frame TAG)

Post by **Thorsten** » Wed May 30, 2007 2:16 pm

Hi,

just look into the PMF_Faq class in the file inc/Faq.php.

Look for the function addRecord().

bye
Thorsten

matteo · Post by **matteo** » Wed May 30, 2007 8:46 pm

Hi thomask,
you should also take a look at the basicXSSClean function in the inc/Init.php file, precisely:

Code: Select all

...
        // remove really unwanted tags
        do {
            $oldstring = $string;
            $string = preg_replace('#</*(applet|meta|xml|blink|link|style|script|embed|object|iframe|frame|frameset|ilayer|layer|bgsound|title|base)[^>]*>#i',"",$string);
        } while ($oldstring != $string);
...

where we impose the deletion of some unsafe (i.e. used for common attacks for e.g. XSS injection) HTML tags.

Ciao,
Matteo

thomask · Post by **thomask** » Thu May 31, 2007 8:54 am

thanks, you guys do an amazing work!