How to disable html filter?

Nuke Cadet Joined: Mar 30, 2007 Posts: 1

I heed to disable php-nuke html filter.
i founded in mainfile.php this:

Code:

function check_html ($str, $strip="") {
/* The core of this code has been lifted from phpslash */
/* which is licenced under the GPL. */
include("config.php");
if ($strip == "nohtml")
$AllowableHTML=array('');
$str = stripslashes($str);
$str = eregi_replace("<[[:space:]]*([^>]*)[[:space:]]*>",'<\\1>', $str);
// Delete all spaces from html tags .
$str = eregi_replace("<a[^>]*href[[:space:]]*=[[:space:]]*\"?[[:space:]]*([^\" >]*)[[:space:]]*\"?[^>]*>",'<a href="\\1">', $str);
// Delete all attribs from Anchor, except an href, double quoted.
$str = eregi_replace("<[[:space:]]* img[[:space:]]*([^>]*)[[:space:]]*>", '', $str);
// Delete all img tags
$str = eregi_replace("<a[^>]*href[[:space:]]*=[[:space:]]*\"?javascript[[:punct:]]*\"?[^>]*>", '', $str);
// Delete javascript code from a href tags -- Zhen-Xjell @ http://nukecops.com
$tmp = "";
while (ereg("<(/?[[:alpha:]]*)[[:space:]]*([^>]*)>",$str,$reg)) {
   $i = strpos($str,$reg[0]);
   $l = strlen($reg[0]);
   if ($reg[1][0] == "/") $tag = strtolower(substr($reg[1],1));
   else $tag = strtolower($reg[1]);
   if ($a = $AllowableHTML[$tag])
   if ($reg[1][0] == "/") $tag = "</$tag>";
   elseif (($a == 1) || ($reg[2] == "")) $tag = "<$tag>";
   else {
      # Place here the double quote fix function.
      $attrb_list=delQuotes($reg[2]);
      // A VER
      //$attrb_list = ereg_replace("&","&",$attrb_list);
      $tag = "<$tag" . $attrb_list . ">";
   } # Attribs in tag allowed
   else $tag = "";
   $tmp .= substr($str,0,$i) . $tag;
   $str = substr($str,$i+$l);
}
$str = $tmp . $str;
return $str;
exit;
/* Squash PHP tags unconditionally */
$str = ereg_replace("<\?","",$str);
return $str;

What i must do to disable this?
i try to comment it, but then nuke doesnt work Sad

PS dont say me about adding tags in $AllowableHTML, i need to disable filter AT ALL.

Site Admin Joined: Aug 17, 2003 Posts: 12383

Code:

function check_html ($str, $strip="") {
return str;
}

You're making yourself extremely vulnerable. Good look with that

Nuke Cadet Joined: May 27, 2006 Posts: 3 Location: EC, MD

Is there a way to have it not strip the HTML and not be vulnerable ? I have several articles in the topics module on my site that had images, tables, etc.... no more. Sad

Site Admin Joined: Aug 17, 2003 Posts: 12383

Put only the proper HTML tags you want to use into the allowed tags in config.php