[pLog-svn] r5418 - in plog/branches/lifetype-1.2: class/action/admin install locale/admin templates/admin
oscar at devel.lifetype.net
oscar at devel.lifetype.net
Fri May 18 04:25:42 EDT 2007
Author: oscar
Date: 2007-05-18 04:25:41 -0400 (Fri, 18 May 2007)
New Revision: 5418
Modified:
plog/branches/lifetype-1.2/class/action/admin/adminpostmanagementcommonaction.class.php
plog/branches/lifetype-1.2/install/defaultconfig.properties.php
plog/branches/lifetype-1.2/locale/admin/locale_ca_ES.php
plog/branches/lifetype-1.2/locale/admin/locale_de_DE.php
plog/branches/lifetype-1.2/locale/admin/locale_en_UK.php
plog/branches/lifetype-1.2/locale/admin/locale_es_ES.php
plog/branches/lifetype-1.2/locale/admin/locale_fr_FR.php
plog/branches/lifetype-1.2/locale/admin/locale_gl_ES.php
plog/branches/lifetype-1.2/locale/admin/locale_it_IT.php
plog/branches/lifetype-1.2/locale/admin/locale_nl_NL.php
plog/branches/lifetype-1.2/locale/admin/locale_zh_CN.php
plog/branches/lifetype-1.2/locale/admin/locale_zh_TW.php
plog/branches/lifetype-1.2/templates/admin/globalsettings_security.template
Log:
Implemented feature request http://bugs.lifetype.net/view.php?id=1303 -- allow blocks of Javascript tags in posts (disabled by default)
Modified: plog/branches/lifetype-1.2/class/action/admin/adminpostmanagementcommonaction.class.php
===================================================================
--- plog/branches/lifetype-1.2/class/action/admin/adminpostmanagementcommonaction.class.php 2007-05-18 07:58:26 UTC (rev 5417)
+++ plog/branches/lifetype-1.2/class/action/admin/adminpostmanagementcommonaction.class.php 2007-05-18 08:25:41 UTC (rev 5418)
@@ -127,8 +127,13 @@
$this->_postText = stripslashes($this->_request->getValue( "postText" ));
else
$this->_postText = $this->_request->getValue( "postText" );
-
- $this->_postText = trim(Textfilter::xhtmlize(Textfilter::filterJavaScript($this->_postText)));
+
+ // check if javascript code is allowed in posts
+ $config =& Config::getConfig();
+ if( !$config->getValue( "allow_javascript_blocks_in_posts", false )) {
+ $this->_postText = Textfilter::filterJavaScript( $this->_postText );
+ }
+ $this->_postText = trim(Textfilter::xhtmlize( $this->_postText ));
$this->_postTopic = trim(Textfilter::xhtmlize(Textfilter::filterAllHTML($this->_request->getValue( "postTopic" ))));
$this->_posterId = $this->_request->getValue( "posterId" );
$this->_postCategories = $this->_request->getValue( "postCategories" );
Modified: plog/branches/lifetype-1.2/install/defaultconfig.properties.php
===================================================================
--- plog/branches/lifetype-1.2/install/defaultconfig.properties.php 2007-05-18 07:58:26 UTC (rev 5417)
+++ plog/branches/lifetype-1.2/install/defaultconfig.properties.php 2007-05-18 08:25:41 UTC (rev 5418)
@@ -126,5 +126,6 @@
$Inserts['hard_show_comments_max'] = "INSERT INTO {dbprefix}config (config_key, config_value, value_type) VALUES ('hard_show_comments_max','50',1);";
$Inserts['upload_allowed_files'] = "INSERT INTO {dbprefix}config (config_key, config_value, value_type) VALUES ('upload_allowed_files','', 3);";
$Inserts['template_load_order'] = "INSERT INTO {dbprefix}config (config_key, config_value, value_type) VALUES ('template_load_order','2', 1);";
-$Inserts['summary_service_name'] = "INSERT INTO {dbprefix}config (config_key, config_value, value_type) VALUES ('summary_service_name','Your Service Name', 3);";
+$Inserts['summary_service_name'] = "INSERT INTO {dbprefix}config (config_key, config_value, value_type) VALUES ('summary_service_name','Your Service Name', 3);";
+$Inserts['allow_javascript_blocks_in_posts'] = "INSERT INTO {dbprefix}config (config_key, config_value, value_type) VALUES ('allow_javascript_blocks_in_posts','0', 1);";
?>
\ No newline at end of file
Modified: plog/branches/lifetype-1.2/locale/admin/locale_ca_ES.php
===================================================================
--- plog/branches/lifetype-1.2/locale/admin/locale_ca_ES.php 2007-05-18 07:58:26 UTC (rev 5417)
+++ plog/branches/lifetype-1.2/locale/admin/locale_ca_ES.php 2007-05-18 08:25:41 UTC (rev 5418)
@@ -1189,4 +1189,7 @@
/// new strings in LT 1.2.2 ///
$messages['posted_by_help'] = 'Esculli autor';
$messages['insert_player'] = 'Afegir reproductor';
+
+/// new strings in LT 1.2.3 ///
+$messages['help_allow_javascript_blocks_in_posts'] = 'Permet l\'us de codi Javascript en els articles mitjançant blocs <script> [ Valor per defecte = No ]';
?>
\ No newline at end of file
Modified: plog/branches/lifetype-1.2/locale/admin/locale_de_DE.php
===================================================================
--- plog/branches/lifetype-1.2/locale/admin/locale_de_DE.php 2007-05-18 07:58:26 UTC (rev 5417)
+++ plog/branches/lifetype-1.2/locale/admin/locale_de_DE.php 2007-05-18 08:25:41 UTC (rev 5418)
@@ -1176,4 +1176,7 @@
/// new strings in LT 1.2.2 ///
$messages['posted_by_help'] = 'Wählen Sie den Autor';
$messages['insert_player'] = 'MP3-Player einfügen';
-?>
+
+/// new strings in LT 1.2.3 ///
+$messages['help_allow_javascript_blocks_in_posts'] = 'Allow blocks of Javascript code in posts via <script> tags. Please be aware that it may pose a security risk to your blog(s) [ Default = No ]';
+?>
\ No newline at end of file
Modified: plog/branches/lifetype-1.2/locale/admin/locale_en_UK.php
===================================================================
--- plog/branches/lifetype-1.2/locale/admin/locale_en_UK.php 2007-05-18 07:58:26 UTC (rev 5417)
+++ plog/branches/lifetype-1.2/locale/admin/locale_en_UK.php 2007-05-18 08:25:41 UTC (rev 5418)
@@ -1171,4 +1171,7 @@
/// new strings in LT 1.2.2 ///
$messages['posted_by_help'] = 'Select article owner';
$messages['insert_player'] = 'Insert Player';
+
+/// new strings in LT 1.2.3 ///
+$messages['help_allow_javascript_blocks_in_posts'] = 'Allow blocks of Javascript code in posts via <script> tags. Please be aware that it may pose a security risk to your blog(s) [ Default = No ]';
?>
\ No newline at end of file
Modified: plog/branches/lifetype-1.2/locale/admin/locale_es_ES.php
===================================================================
--- plog/branches/lifetype-1.2/locale/admin/locale_es_ES.php 2007-05-18 07:58:26 UTC (rev 5417)
+++ plog/branches/lifetype-1.2/locale/admin/locale_es_ES.php 2007-05-18 08:25:41 UTC (rev 5418)
@@ -1183,4 +1183,7 @@
/// new strings in LT 1.2.2 ///
$messages['posted_by_help'] = 'Elija autor';
$messages['insert_player'] = 'Añadir Reproductor';
-?>
+
+/// new strings in LT 1.2.3 ///
+$messages['help_allow_javascript_blocks_in_posts'] = 'Permite el uso de código Javascript en los artículos mediante bloques <script> [ Valor por defecto = No ]';
+?>
\ No newline at end of file
Modified: plog/branches/lifetype-1.2/locale/admin/locale_fr_FR.php
===================================================================
--- plog/branches/lifetype-1.2/locale/admin/locale_fr_FR.php 2007-05-18 07:58:26 UTC (rev 5417)
+++ plog/branches/lifetype-1.2/locale/admin/locale_fr_FR.php 2007-05-18 08:25:41 UTC (rev 5418)
@@ -1352,4 +1352,7 @@
/// new strings in LT 1.2.2 ///
$messages['posted_by_help'] = 'Select article owner';
$messages['insert_player'] = 'Insert Player';
+
+/// new strings in LT 1.2.3 ///
+$messages['help_allow_javascript_blocks_in_posts'] = 'Allow blocks of Javascript code in posts via <script> tags. Please be aware that it may pose a security risk to your blog(s) [ Default = No ]';
?>
\ No newline at end of file
Modified: plog/branches/lifetype-1.2/locale/admin/locale_gl_ES.php
===================================================================
--- plog/branches/lifetype-1.2/locale/admin/locale_gl_ES.php 2007-05-18 07:58:26 UTC (rev 5417)
+++ plog/branches/lifetype-1.2/locale/admin/locale_gl_ES.php 2007-05-18 08:25:41 UTC (rev 5418)
@@ -1189,7 +1189,11 @@
$messages['full_blog_permission'] = 'Permite ó usuaio acceder ó blog como se fóra o propietario';
$messages['error_template_exist'] = 'Houbo un erro engadindo a nova plantilla, xa hai unha plantilla chamada "%s".';
+
//LT 1.2.2
$messages['posted_by_help'] = 'Escolla autor';
$messages['insert_player'] = 'Engadir Reproductor';
+
+/// new strings in LT 1.2.3 ///
+$messages['help_allow_javascript_blocks_in_posts'] = 'Allow blocks of Javascript code in posts via <script> tags. Please be aware that it may pose a security risk to your blog(s) [ Default = No ]';
?>
\ No newline at end of file
Modified: plog/branches/lifetype-1.2/locale/admin/locale_it_IT.php
===================================================================
--- plog/branches/lifetype-1.2/locale/admin/locale_it_IT.php 2007-05-18 07:58:26 UTC (rev 5417)
+++ plog/branches/lifetype-1.2/locale/admin/locale_it_IT.php 2007-05-18 08:25:41 UTC (rev 5418)
@@ -1171,4 +1171,7 @@
/// new strings in LT 1.2.2 ///
$messages['posted_by_help'] = 'Seleziona il proprietario dell\'articolo';
$messages['insert_player'] = 'Inserisci il Player';
+
+/// new strings in LT 1.2.3 ///
+$messages['help_allow_javascript_blocks_in_posts'] = 'Allow blocks of Javascript code in posts via <script> tags. Please be aware that it may pose a security risk to your blog(s) [ Default = No ]';
?>
\ No newline at end of file
Modified: plog/branches/lifetype-1.2/locale/admin/locale_nl_NL.php
===================================================================
--- plog/branches/lifetype-1.2/locale/admin/locale_nl_NL.php 2007-05-18 07:58:26 UTC (rev 5417)
+++ plog/branches/lifetype-1.2/locale/admin/locale_nl_NL.php 2007-05-18 08:25:41 UTC (rev 5418)
@@ -1250,4 +1250,7 @@
/// new strings in LT 1.2.2 ///
$messages['posted_by_help'] = 'Selecteer het artikel van de eigenaar';
$messages['insert_player'] = 'Voeg Speler Toe';
+
+/// new strings in LT 1.2.3 ///
+$messages['help_allow_javascript_blocks_in_posts'] = 'Allow blocks of Javascript code in posts via <script> tags. Please be aware that it may pose a security risk to your blog(s) [ Default = No ]';
?>
\ No newline at end of file
Modified: plog/branches/lifetype-1.2/locale/admin/locale_zh_CN.php
===================================================================
--- plog/branches/lifetype-1.2/locale/admin/locale_zh_CN.php 2007-05-18 07:58:26 UTC (rev 5417)
+++ plog/branches/lifetype-1.2/locale/admin/locale_zh_CN.php 2007-05-18 08:25:41 UTC (rev 5418)
@@ -1172,4 +1172,7 @@
/// new strings in LT 1.2.2 ///
$messages['posted_by_help'] = 'é€‰æ‹©æ–‡ç« ä½œè€…';
$messages['insert_player'] = 'æ’å…¥æ’放器';
+
+/// new strings in LT 1.2.3 ///
+$messages['help_allow_javascript_blocks_in_posts'] = 'Allow blocks of Javascript code in posts via <script> tags. Please be aware that it may pose a security risk to your blog(s) [ Default = No ]';
?>
\ No newline at end of file
Modified: plog/branches/lifetype-1.2/locale/admin/locale_zh_TW.php
===================================================================
--- plog/branches/lifetype-1.2/locale/admin/locale_zh_TW.php 2007-05-18 07:58:26 UTC (rev 5417)
+++ plog/branches/lifetype-1.2/locale/admin/locale_zh_TW.php 2007-05-18 08:25:41 UTC (rev 5418)
@@ -1172,4 +1172,7 @@
/// new strings in LT 1.2.2 ///
$messages['posted_by_help'] = 'é¸æ“‡æ–‡ç« 作者';
$messages['insert_player'] = 'æ’å…¥æ’放器';
+
+/// new strings in LT 1.2.3 ///
+$messages['help_allow_javascript_blocks_in_posts'] = 'Allow blocks of Javascript code in posts via <script> tags. Please be aware that it may pose a security risk to your blog(s) [ Default = No ]';
?>
\ No newline at end of file
Modified: plog/branches/lifetype-1.2/templates/admin/globalsettings_security.template
===================================================================
--- plog/branches/lifetype-1.2/templates/admin/globalsettings_security.template 2007-05-18 07:58:26 UTC (rev 5417)
+++ plog/branches/lifetype-1.2/templates/admin/globalsettings_security.template 2007-05-18 08:25:41 UTC (rev 5418)
@@ -12,4 +12,11 @@
<div class="formHelp">{$locale->tr("help_maximum_comment_size")}</div>
<input style="width:100%" type="text" id="config[maximum_comment_size]" name="config[maximum_comment_size]" value="{$maximum_comment_size}"/>
</div>
+ <!-- allow javascript blocks in posts -->
+ <div class="field">
+ <label for="config[allow_javascript_blocks_in_posts]">allow_javascript_blocks_in_posts</label>
+ <div class="formHelp">{$locale->tr("help_allow_javascript_blocks_in_posts")}</div>
+ <input class="radio" type="radio" id="config[allow_javascript_blocks_in_posts]" name="config[allow_javascript_blocks_in_posts]" value="1" {if $allow_javascript_blocks_in_posts == 1 } checked="checked" {/if} />{$locale->tr("yes")}
+ <input class="radio" type="radio" id="config[allow_javascript_blocks_in_posts]" name="config[allow_javascript_blocks_in_posts]" value="0" {if $allow_javascript_blocks_in_posts == 0 } checked="checked" {/if} />{$locale->tr("no")}
+ </div>
</div>
\ No newline at end of file
More information about the pLog-svn
mailing list