xss filtering Q: Fatal error: Call to undefined function get_instance() ...system/libraries/Input.php on line 855

[eluser]Patrick Johanneson[/eluser]
Edit Oops, xss_clean works fine when I pass it the strings one by one, instead of an array all at once.

However, if I enter <javascript>* in the text box, I get this error when I've got $config['global_xss_filtering'] set to TRUE:

Fatal error: Call to undefined function get_instance() in /Path/to/CI/system/libraries/Input.php on line 855

* Or, in fact, <[anything]>. <y> will do it, in fact. However, < on its own, or < >, will not.
___________________________

Hi,

When I upgraded from 1.5.3 to 1.5.4, I ran into a problem with the xss_clean stuff.

If I run the following code sample:

Code:

<?php

class Testing extends Controller{
function index(){
}

function foo(){
  if(!$_POST){
   echo("
   <form action="/MBAir/testing/foo" method="POST">
   Text: &lt;textarea name="Text"&gt;Text goes here&lt;/textarea&gt;<br>
   &lt;input type="submit"&gt;
   &lt;/form&gt;
   ");
   exit;
  }
  
$this->load->helper('security');
  $this->_dump($_POST);
  $post = xss_clean($_POST);
  $this->_dump($post);
}

function _dump($x){
  echo("<pre>n");
  print_r($x);
  echo("</pre>n");
}

}

?&gt;

I get the following errors:

A PHP Error was encountered
Severity: Warning
Message: stripos() expects parameter 1 to be string, array given
Filename: libraries/Input.php
Line Number: 690

A PHP Error was encountered
Severity: Warning
Message: stripos() expects parameter 1 to be string, array given
Filename: libraries/Input.php
Line Number: 696

A PHP Error was encountered
Severity: Warning
Message: stripos() expects parameter 1 to be string, array given
Filename: libraries/Input.php
Line Number: 702

I discovered this because one of my scripts has a set of three FCKEditor boxes in it. If I set $config['global_xss_filtering'] to TRUE in the config.php file, and then submit text in any or all of the FCKEditor boxes, I get the following error:

Fatal error: Call to undefined function get_instance() in /Path/to/CI/system/libraries/Input.php on line 855

Edit This happens with a clean install of CI 1.5.4 as well.

Any suggestions?