diff --git a/admin/bm.php b/admin/bm.php index b31ce8a..bb1b0dd 100644 --- a/admin/bm.php +++ b/admin/bm.php @@ -55,14 +55,14 @@ if ($user->isAdmin()) { if (!get_magic_quotes_gpc()) { $_POST["title"] = addslashes($_POST["title"]); $_POST["description"] = addslashes($_POST["description"]); - } + } - $_POST["title"] = strip_tags($_POST["title"]); - $_POST["description"] = strip_tags($_POST["description"]); + $textile = new Textile(); + + $_POST["title"] = $textile->TextileThis(removeBadTags($_POST["title"])); + $_POST["description"] = $textile->TextileThis(removeBadTags($_POST["description"])); if ($tumble->addPost($_POST)) { - //header("Location: ".$conf->urlGelato."/admin/index.php?added=true"); - //die(); $input = array("{type}"); $output = array("1"); diff --git a/admin/comments.php b/admin/comments.php index 8cdd0ea..601ab41 100644 --- a/admin/comments.php +++ b/admin/comments.php @@ -22,9 +22,12 @@ $commentId = ($isEdition) ? $_GET["edit"] : NULL; if(isset($_POST["btnAdd"])) { unset($_POST["btnAdd"]); - $_POST["username"] = strip_tags($_POST["username"]); - $_POST["email"] = strip_tags($_POST["email"]); - $_POST["web"] = strip_tags($_POST["web"]); + + $textile = new Textile(); + + $_POST["username"] = $textile->TextileThis(removeBadTags($_POST["username"])); + $_POST["email"] = $textile->TextileThis(removeBadTags($_POST["email"])); + $_POST["web"] = $textile->TextileThis(removeBadTags($_POST["web"])); if (isset($_POST["id_comment"])) { if ($isAdmin) { diff --git a/admin/index.php b/admin/index.php index 3e05547..3236fc9 100644 --- a/admin/index.php +++ b/admin/index.php @@ -66,11 +66,12 @@ if ($user->isAdmin()) { if (!get_magic_quotes_gpc()) { $_POST["title"] = addslashes($_POST["title"]); $_POST["description"] = addslashes($_POST["description"]); - } + } - $_POST["title"] = strip_tags($_POST["title"]); - $_POST["description"] = strip_tags($_POST["description"]); + $textile = new Textile(); + $_POST["title"] = $textile->TextileThis(removeBadTags($_POST["title"])); + $_POST["description"] = $textile->TextileThis(removeBadTags($_POST["description"])); if (isset($_POST["id_post"])) { $tumble->modifyPost($_POST, $_POST["id_post"]); @@ -109,6 +110,16 @@ if ($user->isAdmin()) { Lightbox.fileLoadingImage = "css/images/loading.gif"; Lightbox.fileBottomNavCloseImage = "css/images/closelabel.gif"; +richText) { +?> + + +