diff options
| author | Meik Sievertsen <acydburn@phpbb.com> | 2006-07-20 18:39:00 +0000 |
|---|---|---|
| committer | Meik Sievertsen <acydburn@phpbb.com> | 2006-07-20 18:39:00 +0000 |
| commit | 191a21d461debcce05719a17f36bec8fbf1ef7d4 (patch) | |
| tree | 5220fd3b22b1fa129676816cf9a6b0aa85c1b8eb /phpBB | |
| parent | 13bf07d27532d25e6581aa1d4185d1fa4ea7e08f (diff) | |
| download | forums-191a21d461debcce05719a17f36bec8fbf1ef7d4.tar forums-191a21d461debcce05719a17f36bec8fbf1ef7d4.tar.gz forums-191a21d461debcce05719a17f36bec8fbf1ef7d4.tar.bz2 forums-191a21d461debcce05719a17f36bec8fbf1ef7d4.tar.xz forums-191a21d461debcce05719a17f36bec8fbf1ef7d4.zip | |
could have been a copy&paste error, but the expression is also removing the </script> tag from valid script blocks (javascript for example). :)
git-svn-id: file:///svn/phpbb/trunk@6195 89ea8834-ac86-4346-8a33-228a782c2dd0
Diffstat (limited to 'phpBB')
| -rw-r--r-- | phpBB/includes/functions_template.php | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/phpBB/includes/functions_template.php b/phpBB/includes/functions_template.php index ac15244687..d9368ef395 100644 --- a/phpBB/includes/functions_template.php +++ b/phpBB/includes/functions_template.php @@ -136,12 +136,13 @@ class template_compile // php is a no-no. There is a potential issue here in that non-php // content may be removed ... however designers should use entities // if they wish to display < and > +/* $match_php_tags = array('#\<\?php.*?\?\>#is', '#<[^\w<]*(script)(((?:"[^"]*"|\'[^\']*\'|[^<>\'"])+)?(language[^<>\'"]+("[^"]*php[^"]*"|\'[^\']*php[^\']*\'))((?:"[^"]*"|\'[^\']*\'|[^<>\'"])+)?)?>.*?</script>#is', '#\<\?.*?\?\>#s', '#\<%.*?%\>#s'); $code = preg_replace($match_php_tags, '', $code); +*/ // An alternative to the above would be calling this function which would be the ultimate solution but also has it's drawbacks. - // At the moment it is commented out until we decide which method to use. -// $this->remove_php_tags($code); + $this->remove_php_tags($code); // Pull out all block/statement level elements and seperate plain text preg_match_all('#<!-- PHP -->(.*?)<!-- ENDPHP -->#s', $code, $matches); |