Welcome Guest, Not a member yet? Register   Sign In
strip image tags issue
#1

[eluser]rfer[/eluser]
Hey everyone!

I'm having this weird problem. I'm using xss_clean on my forms, but somehow image tags are not being filtered...I took a look at the Validation and Input classes and they seem to be doing that (or attempting at least)...

Is this a bug? Or am I doing something wrong?
#2

[eluser]Pascal Kriete[/eluser]
It doesn't strip image tags, it looks for malicious code inside the tag. If you don't want users posting images, you will need to strip the tags manually.
#3

[eluser]rfer[/eluser]
Ah, thanks!

Still, in the user guide there's a prepping function called strip_image_tags which should do what I want, but doesn't seem to exist?
#4

[eluser]Pascal Kriete[/eluser]
My installation definitely has that. It's in the security helper (system/helpers/security_helper.php) starting on line 90.




Theme © iAndrew 2016 - Forum software by © MyBB