IMAGES NEWS (NOT WORK NOW)

Nuke Soldier Joined: Oct 24, 2005 Posts: 13

Hello, i've searched in this forum a solution but i didn't found it, and i've watched that many people have this problem.
Well ill explain, i have 2 nukes 7.8
1 (FRESH WITHOTUH PATCHING) works img
The other was at star 7.4 and i patched it to 7.8 and now images inst showd

¿What is the file or the thing who make that to stop showing imgs?

Ty

Nuke Soldier Joined: Oct 24, 2005 Posts: 13

Any body knows?

Site Admin Joined: Jun 18, 2004 Posts: 210

its the patch causing it, i will look into it but not just yet, due to little time i have atm

thanks

Steve Wink

Nuke Soldier Joined: Oct 24, 2005 Posts: 13

Thank you

and luck watching why Rolling Eyes

Posted: Thu Jul 20, 2006 2:58 pm

Check your config.php and see if the img tag is allowed,

Code:

$AllowableHTML = array("b"=>1,"i"=>1,"strike"=>1,"div"=>2,"u"=>1,"a"=>2,"em"=>1,"br"=>1,"strong"=>1,"blockquote"=>1,"tt"=>1,"li"=>1,"ol"=>1,"ul"=>1);

Add in there "img"=>2, and see if that fixes the problem.

Nuke Soldier Joined: Oct 24, 2005 Posts: 13

Yes that was the 1st that i did, and img not showing.

Nuke Soldier Joined: Oct 24, 2005 Posts: 13

Ok i fixed it putting the news and avantgo modules of site working to the not working site and now it works fine xD

Posted: Fri Jul 21, 2006 6:20 am

Good deal.

Nuke Cadet Joined: Apr 27, 2003 Posts: 4

Mind my asking how I would go about adding certain html as allowable in the news section? I checked my config.php, and I have "img" there, but for some reason when I use "img src" it cuts off the 'src' Crying or Very sad

I'm also having the issue with the slashes every time I edit, but as I read it, that's an issue undergoing scrutiny as we speak.

This was alot to swallow. My site was victimized by a script kiddie, so I decided to up from v6.5 to 7.6 with the patched 3.2 + NukeSentinel. After the changes all of my previous news articles had the images omitted, and I've had hell posting new ones.

I'd like to be able to use a bit more html than is currently allowed..."center" would be nice for one. Razz

btw...is it normal for Nuke Sentinel to send me to a warning page when I click on one of the referral links in admin? And what means is there to test Sentinel?

Captain Joined: Apr 30, 2004 Posts: 566

I think the issue is not with the allowable html. I think the issue is with the function check_html().

In the index.php file of the module where you have the issue, go to the function that displays or sends data to the browser. For the field that is giving you the problem, remove the check_html. Make sure to remove one of the ")" at the end.

see if that fixes your problem....

Nuke Cadet Joined: Apr 27, 2003 Posts: 4

That in fact, DID fix the feed from the DB. Any existing article in the DB displays correctly, but I cannot post any new news stories containing center tags, etc, without doing so in the DB itself.

I edited below the line:

Code:

function theindex($new_topic="0") {

for $title, $hometext, $bodytext, removing the check, leaving only in $topic_title, $aid, $comments, $topic, $informant, $notes and the following string, which I was unsure of (which occurs twice):

Code:

if ($catid > 0) {
$row2 = $db->sql_fetchrow($db->sql_query("SELECT title FROM ".$prefix."_stories_cat WHERE catid='$catid'"));
$cattitle = check_words(check_html($row2['title'], "nohtml"));

I don't really care if the title, adminID, or informant have the exclusions. I didn't think it wise to allow exclusions for comments or notes. But does the check_html affect the entire series of events regardless of line? I would think by the way I did this, that new topics would only allow the exclusion for home and body text, while leaving the checks in place for the others...save for that last spot of code, and I don't know what it does really.

Is that second code snippet what inserts the data into the tables? That would explain the lack of the ability to post from the admin interface...but what security risk am I employing by removing the check from that string?

Captain Joined: Apr 30, 2004 Posts: 566

Functions that contain the word "save" in it generally are the ones that actually save to the database. Another way of finding it is to look for "Update" in the SQL query or "ADD". Generally, those functions will have a line like this about the sql query:

Code:

$mytext = check_html($mytext);

where the variable is filtered before going to the database. One other way is to look for a value in the form code for the save button and see what function name it goes to.

In the grand scheme of things, yes, not filtering data is a potential security risk, however, since you must approve a news article, that somewhat reduces the risk.

I made a proposal on another nuke support site to fix this issue, however, I am unsure whether anything will be done, or what they may decide.

As far as not being able to use the center tag, try this..... in the style.css file of your theme, put in this code:

Code:

span.centertext {text-align:center}

Then in your text area, surround everything you wish to center like this:

Code:

<span class='centertext'>ALL_TEXT_INPUTS_HERE</span>

Corporal Joined: Dec 03, 2003 Posts: 50

I was having the same problem with the images and after working on it for 2-3 days I finally came into the conclusion that chatservs patch doesn't like,

Code:

border="0"

, or

Code:

border=""

, on images, so you have to put a value into it for example

Code:

border="1"

Private Joined: Nov 16, 2005 Posts: 39

I always use border 0 for images, pictures and frames.

Site Admin Joined: Aug 17, 2003 Posts: 12397

In mainfile.php

Code:

FIND (x2)

($tmp != "")

CHANGE TO

(!empty($tmp))