From: Ross M K. <ro...@ka...> - 2002-06-03 20:01:56
|
I really do hope I am not missing something obvious :) I am working on an internal PHP Wiki site, and have gotten requests turn = on HTML support. The INSTALL file says: "2. ALLOWING EMBEDDED HTML PhpWiki ships with this featured disabled by default. According to CERT=20 (http://www.cert.org/advisories/CA-2000-02.html) malicious users can = embed HTML in your pages that allow pure evil to happen. You can uncomment the = "elseif" in lib/transform.php to allow embedded HTML; but you should = NEVER do this if your Wiki is publically accessible." Good Follower of Documentation that I am, I uncommented this block: elseif (preg_match("/(^\|)(.*)/", $tmpline, $matches)) { //HTML mode $html .=3D SetHTMLOutputMode("", ZERO_LEVEL, 0); $html .=3D $matches[2]; continue; } Is there anything else I need to do? It doesn't seem to be working, = PHPWicki munges the HTML just like it did before I made the change... -Ross=20 |