Formatting Fix for 3.1.7 HTML input

[GSP]

Hello,

I�m having problems with this one and I�m unsure why at this point, it seems easy enough. I�m trying to allow users to the ability to post pre-determined html tags in their ads description. I thought I�d post and see if anyone can see where I�ve gone wrong.

I�ve followed the instructions as per threads 1 and 2 in this post. Opened includes/functions.php and replaced line 635 with John�s #2 thread:

PHP Code:

$allowed_tags = array("<br>", "<a>", "<b>")
$str = strip_tags($str, $allowed_tags);


Lines 636 and 637 I left as is:

$str = preg_replace('/\0+/', '', $str);
$str = preg_replace('/(\\\\0)+/', '', $str);

So far when I input the above it wipes out my site causing nothing more than a blank white screen. Any ideas?

[GSP]

Is their anyone that might be able to help me out with this or anyone that could advise me as to where I have gone wrong?

[CHRD]

how can I stop it from stripping line breaks from extra field text boxes, this fix works for Short Disc and Main Disc

[Chaslie]

Have found a quick fix for tags being stripped in extra fields. If you revert back to using includes/functions.php from v3.1.4 (Revision: 1.9) , the tags are not lost when you 'add' or 'modify' a listing in the front end - both for Short description, description AND extra fields (particularly when you include an embeded video).

The main difference between these 2 files is that v3.1.4 has this:

if($lev==0)
	{
		$path[]= safeStripSlashes($row['name']);
	}
	else
	{

and 3.1.7 doesn't.

However v3.1.7 (Revision: 1.13) has all the xss_clean componant added where as v3.1.4 doesn't.

I'll submit this to Bug Tracker.

I have also been having the problem with adding the '$str = strip_tags' suggestions made earlier. Adding <br> was fine but anything else was throwing up MySQL errors and still stripping the code (in extra fields only).