diff --git a/src/CoreFields/CharField.php b/src/CoreFields/CharField.php index 9f693e8..0ad64b5 100644 --- a/src/CoreFields/CharField.php +++ b/src/CoreFields/CharField.php @@ -55,7 +55,7 @@ class CharField extends PhangoField { //Delete Javascript tags and simple quotes. $this->value=Utils::form_text($value); - return form_text($value); + return Utils::form_text($value); } diff --git a/src/CoreFields/TextHTMLField.php b/src/CoreFields/TextHTMLField.php index 7a3620c..526c296 100644 --- a/src/CoreFields/TextHTMLField.php +++ b/src/CoreFields/TextHTMLField.php @@ -27,6 +27,7 @@ class TextHTMLField extends PhangoField { $this->form='TextAreaForm'; $this->multilang=$multilang; + $this->set_safe_html_tags(); } @@ -118,7 +119,7 @@ class TextHTMLField extends PhangoField { $this->allowedtags['i']=array('pattern' => '/<i.*?>(.*?)<\/i>/s', 'replace' => '$1', 'example' => ''); $this->allowedtags['u']=array('pattern' => '/<u.*?>(.*?)<\/u>/s', 'replace' => '$1', 'example' => ''); $this->allowedtags['blockquote']=array('pattern' => '/<blockquote.*?>(.*?)<\/blockquote>/s', 'replace' => '$1', 'example' => '
', 'recursive' => 1); - $this->allowedtags['img']=array('pattern' => '/<img.*?alt="([aA-zZ]+)".*?src="('.str_replace('/', '\/', PhangoVar::$base_url).'\/media\/smileys\/[^\r\n\t<"].*?)".*?\/>/', 'replace' => '', 'example' => 'emoticon'); + //$this->allowedtags['img']=array('pattern' => '/<img.*?alt="([aA-zZ]+)".*?src="('.str_replace('/', '\/', PhangoVar::$base_url).'\/media\/smileys\/[^\r\n\t<"].*?)".*?\/>/', 'replace' => '', 'example' => 'emoticon'); }