Bug in Seller Store

[darek]

Ok, I know nothing about coding, but I just bought the 68c and have some plans to use it. I am testing it now. I noticed that the when user uses Seller Store the photo does show on RTE but after saving it disapears. Then I noticed that it works fine when in admin, but when in admin something is written and submitted then user cannot load a logo. So I compared 2 files. I have found little changes to admin.php and index.php. Here are the lines:

admin.php
if(isset($HTTP_POST_VARS['sImage']))
{
$extraSQL=",sImage='".safeAddSlashes($HTTP_POST_VA RS['sImage'])."'";
}
$sSQL=sprintf("UPDATE ".PREFIX."store SET sTitle=%s, sDescription=%s".$extraSQL." WHERE sID=%s",
GetSQLValueString($_POST['sTitle'], "text"),
GetSQLValueString($_POST['sDescription'], "text"),
GetSQLValueString($sID, "int"));

index.php
if(isset($_POST['sImage']))
{
$extraSQL=",sImage='".safeAddSlashes($_POST['sImage'])."'";
}
//badwords
$description=@$_POST['sDescription'];
$description = filterword($description);
$description = ereg_replace("[[:alpha:]]+://[^<>[:space:]]+[[:alnum:]/]"," ", $description);

$sSQL=sprintf("UPDATE ".PREFIX."store SET sTitle=%s, sDescription=%s".$extraSQL." WHERE sUserID=%s AND sID=%s",
GetSQLValueString($_POST['sTitle'], "text"),
GetSQLValueString($description, "text"),
GetSQLValueString($userid, "int"),
GetSQLValueString($sID, "int"));

we don't need to mention the badwords for this purpose, but I inclosed this in order not to devide the code

So I chaned this line "GetSQLValueString($description, "text")," from index.php and put this one: "GetSQLValueString($_POST['sDescription'], "text"),"

All seems to work fine now.

I would have a question to moderators: is it ok? Is anything else that should be changed?

[Eric Barnes]

If it is working now I assume it is fine.

However by doing that you are skipping this section:

PHP Code:


        $description=@$_POST['sDescription'];
        $description = filterword($description);
        $description = ereg_replace("[[:alpha:]]+://[^<>[:space:]]+[[:alnum:]/]"," ", $description); 


Which handles the badwords and strips out any urls entered.

[darek]

Hi, we meet first time, the code you wrote - ok, I got it, but it just did not work properly, is any other way to do it?

I have one more question. I noticed that the tiny mce is quite more advanced, I noticed that this code:

PHP Code:

theme_advanced_buttons1 : "bold,italic,strikethrough,separator,bullist,numlist,outdent,indent,separator,justifyleft,justifycenter,justifyright,separator,link,unlink,image,separator,undo,redo,code,wphelp", 


controll the buttons, what should I write to have more advanced code like tables, different text etc, or, if I could go a bit further, I found this RTE http://www.fckeditor.net/demo/ it is quite good and it is in polish, would it be very difficult to change the RTE, this would be very useful for me. Thanks a lot.

[Eric Barnes]

To integrate the full version of tinymce you can download it from their site then use their setup instructions. We use a trimmed down version because the full package is pretty large and ads a lot to our download size.

[darek]

Thanks a lot, I will give it a try.