[dontpanic]

OK, If you make the changes below you will be able to accept and validate HTML from the public submission page...of course you still need to get the material in HTML.

In articles.php, find:

PHP Code:

$result = mysql_query("INSERT INTO vbArticles_content (categoryid, title, byline, author, date, content, valid) VALUES ('$catid', '".addslashes(htmlspecialchars($title))."', '".addslashes(htmlspecialchars($byline))."', '".addslashes(htmlspecialchars($author))."', '$date', '".addslashes(htmlspecialchars($content))."', $vd)"); 


Replace with:

PHP Code:

$result = mysql_query("INSERT INTO vbArticles_content (categoryid, title, byline, author, date, content, valid) VALUES ('$catid', '".addslashes(htmlspecialchars($title))."', '".addslashes(htmlspecialchars($byline))."', '".addslashes(htmlspecialchars($author))."', '$date', '".addslashes($content)."', $vd)"); 


That fixes it so you can submit in HTML and maintain it while it goes into the database.

Now, in vbArticlesadmin.php, find in the DO VALIDATE NEW LINKS section:

PHP Code:

$DB_site->query("UPDATE vbArticles_content SET valid='$val',title='".addslashes(htmlspecialchars($name[$key]))."',byline='".addslashes(htmlspecialchars($desc[$key]))."',author='".addslashes(htmlspecialchars($name[$key]))."',date='".addslashes(htmlspecialchars($name[$key]))."',content='".addslashes(htmlspecialchars($desc[$key]))."' WHERE artid='$key'"); 


And replace it with:

PHP Code:

$DB_site->query("UPDATE vbArticles_content SET valid='$val',title='".addslashes(htmlspecialchars($title[$key]))."',byline='".addslashes(htmlspecialchars($byline[$key]))."',author='".addslashes(htmlspecialchars($name[$key]))."',date='".addslashes(htmlspecialchars($date[$key]))."',content='".addslashes($desc[$key])."' WHERE artid='$key'"); 


No guarantees this will work for you, but I've got it working now that users can submit articles properly formatted in HTML. I can then validate them and they will post formatted in HTML. :rambo: