
01-08-2011, 07:45 PM
|
|
|
Join Date: Jun 2006
Location: Rome
Posts: 730
Благодарил(а): 0 раз(а)
Поблагодарили:
0 раз(а) в 0 сообщениях
|
|
Quote:
Originally Posted by NovoCiv
I finally figured out a fix.
In Plugin Manager find the newreply_quote in the vS Hide Hack section.
Under
PHP Code:
$pagetext = $GLOBALS['hhr']->strip_bbcode($pagetext, 'editor');
Add
PHP Code:
$pattern = '/\[hide\](.*)\[\/hide\]/i'; $replacement = " [i]Hide tags Hidden[/i] "; $pagetext = preg_replace($pattern, $replacement, $pagetext);
Edit: The first post can still reveal hidden content due to meta tags. There are various ways to fix this but I removed the vulnerability from all but the public sections (who needs meta tags in members only sections anyway?) by changing this to this in Showthread template:
PHP Code:
<vb:if condition="$threadinfo['keywords']"><meta name="keywords" content="{vb:raw threadinfo.keywords}" /></vb:if> <meta name="description" content="{vb:raw thread.meta_description}" />
PHP Code:
<vb:if condition="in_array($threadinfo['forumid'], array(28,30,32))"> <vb:if condition="$threadinfo['keywords']"><meta name="keywords" content="{vb:raw threadinfo.keywords}" /></vb:if> <meta name="description" content="{vb:raw thread.meta_description}" /> </vb:if>
|
have anyone else tried this?
EDIT:
what this stand for?
array(28,30,32))">
|