论坛风格切换

快捷通道

论坛导航

5368阅读
0回复

[常见问题]发帖script不过滤 [复制链接]

上一主题下一主题查看指定楼层

查看指定楼层

离线太史慈

发帖: 766

金币: 626

威望: 556

只看楼主倒序阅读使用道具楼主发表于: 2011-05-04

程序默认是把script过滤掉了，script非常危险，但如果不想过滤，可以这么改
pw8.5
lib/forum/post.class.php
找到

array("/<script.*>.*<\/script>/is","/<(([^\"']|\"[^\"]*\"|'[^']*')*?)>/eis","/javascript/i"),
array("","\$this->jscv('\\1')","java script"),

改成

array("/<(([^\"']|\"[^\"]*\"|'[^']*')*?)>/eis","/javascript/i"),
array("\$this->jscv('\\1')","java script"),

如果需要某些版块支持，这样改
找到

$this->data['content'] = preg_replace(
array("/<script.*>.*<\/script>/is","/<(([^\"']|\"[^\"]*\"|'[^']*')*?)>/eis","/javascript/i"),
array("","\$this->jscv('\\1')","java script"),
str_replace('.','.',$this->data['content'])
);

改成

global $fid;
if(!in_array($fid,array(2,3,4))){
$this->data['content'] = preg_replace(
array("/<script.*>.*<\/script>/is","/<(([^\"']|\"[^\"]*\"|'[^']*')*?)>/eis","/javascript/i"),
array("","\$this->jscv('\\1')","java script"),
str_replace('.','.',$this->data['content'])
);
}else{
$this->data['content'] = preg_replace(
array("/<(([^\"']|\"[^\"]*\"|'[^']*')*?)>/eis","/javascript/i"),
array("\$this->jscv('\\1')","java script"),
str_replace('.','.',$this->data['content'])
);
}

[url=http://www.phpwind.com]phpwind[/url]