From: Steve W. <sw...@pa...> - 2002-06-05 20:52:04
|
Do you preface all lines with |, like so: |<h3>man, it sure is a drag to use HTML</h3> |<p> |<hr> ~swain On Mon, 3 Jun 2002, Ross M Karchner wrote: > I really do hope I am not missing something obvious :) > > I am working on an internal PHP Wiki site, and have gotten requests turn on HTML support. > > The INSTALL file says: > > "2. ALLOWING EMBEDDED HTML > > PhpWiki ships with this featured disabled by default. According to CERT > (http://www.cert.org/advisories/CA-2000-02.html) malicious users can embed > HTML in your pages that allow pure evil to happen. You can uncomment the > "elseif" in lib/transform.php to allow embedded HTML; but you should NEVER > do this if your Wiki is publically accessible." > > Good Follower of Documentation that I am, I uncommented this block: > > elseif (preg_match("/(^\|)(.*)/", $tmpline, $matches)) { > //HTML mode > $html .= SetHTMLOutputMode("", ZERO_LEVEL, 0); > $html .= $matches[2]; > continue; > } > > Is there anything else I need to do? It doesn't seem to be working, PHPWicki munges the HTML just like it did before I made the change... > > -Ross > --- http://www.panix.com/~swain/ "Without music to decorate it, time is just a bunch of boring production deadlines or dates by which bills must be paid." -- Frank Zappa |