Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 Programming Discussions
FAQ Community Calendar Today's Posts Search

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #4  
Old 07-25-2005, 07:05 PM
Gio~Logist's Avatar
Gio~Logist Gio~Logist is offline
 
Join Date: Jun 2004
Location: San Francisco
Posts: 2,575
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

a code hellsatan has come up with

PHP Code:
if(!(empty($vboptions['allowedhtmltags']))) {  
  
 
$post['fieldx'] = strip_tags($post['fieldx'], $vboptions['allowedhtmltags']);  
  
 } 
now if only we can find out where $post[fieldx] is parsed

here's some php i found in member.php

PHP Code:
// *********************
// CUSTOM PROFILE FIELDS
$profilefields $DB_site->query("
    SELECT profilefieldid, required, title, type, data, def, height
    FROM " 
TABLE_PREFIX "profilefield
    WHERE form = 0 OR 6 OR 7  OR 8" 
iif(!can_moderate(), "
        AND hidden = 0"
) . "
    ORDER BY displayorder
"
);


$search = array(
    
'#(\r\n|\n|\r)#',
    
'#(<br />){3,}#'// Replace 3 or more <br /> with two <br />
);
$replace = array(
    
'<br />',
    
'<br /><br />',
);

while (
$profilefield $DB_site->fetch_array($profilefields))
{
    
exec_switch_bg();
    
$profilefieldname "field$profilefield[profilefieldid]";
    if (
$profilefield['type'] == 'checkbox' OR $profilefield['type'] == 'select_multiple')
    {
        
$data unserialize($profilefield['data']);
        foreach (
$data AS $key => $val)
        {
            if (
$userinfo["$profilefieldname"] & pow(2$key))
            {
                
$profilefield['value'] .= iif($profilefield['value'], ', ') . $val;
            }
        }
    }
    else if (
$profilefield['type'] == 'textarea')
    {
        
$profilefield['value'] = preg_replace($search$replacetrim($userinfo["$profilefieldname"]));
    }
    else
    {
        
$profilefield['value'] = $userinfo["$profilefieldname"];
    }
    if (
$profilefield['value'] != '')
    {
        
$show['extrainfo'] = true;
    }
    eval(
'$customfields .= "' fetch_template('memberinfo_customfields') . '";');

}
// END CUSTOM PROFILE FIELDS
// ************************* 
is this where the $post[fieldx] isparsed?
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 05:38 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.14042 seconds
  • Memory Usage 3,739KB
  • Queries Executed 12 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (23)bbcode_php
  • (2)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (38)post_thanks_box
  • (38)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (38)post_thanks_postbit_info
  • (38)postbit
  • (38)postbit_onlinestatus
  • (38)postbit_wrapper
  • (1)showthread_list
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_threadedmode.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids_threaded
  • showthread_threaded_construct_link
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete