cvs: phpweb / submit-event.php
| From: | Rasmus Lerdorf | Date: | Sun, 24 Jun 2007 20:28:53 +0000 |
| Subject: | cvs: phpweb / submit-event.php | ||
| Groups: | php.mirrors | ||
| Request: | Send a blank email to php-mirrors+get-35815@lists.php.net to get a copy of this message | ||
rasmus Sun Jun 24 20:28:53 2007 UTC
Modified files:
/phpweb submit-event.php
Log:
gah
http://cvs.php.net/viewvc.cgi/phpweb/submit-event.php?r1=1.36&r2=1.37&diff_format=u
Index: phpweb/submit-event.php
diff -u phpweb/submit-event.php:1.36 phpweb/submit-event.php:1.37
--- phpweb/submit-event.php:1.36 Mon Jun 4 16:57:57 2007
+++ phpweb/submit-event.php Sun Jun 24 20:28:53 2007
@@ -1,5 +1,5 @@
<?php
-// $Id: submit-event.php,v 1.36 2007/06/04 16:57:57 bjori Exp $
+// $Id: submit-event.php,v 1.37 2007/06/24 20:28:53 rasmus Exp $
$_SERVER['BASE_PAGE'] = 'submit-event.php';
include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc';
include_once $_SERVER['DOCUMENT_ROOT'] . '/include/posttohost.inc';
@@ -50,7 +50,7 @@
}
$_POST['ldesc'] = trim(strip_tags($_POST['ldesc'],
'<a><i><b><br /><p>'));
- $_POST['ldesc'] =
preg_replace("/(style|on\\w+?)\s*=\s*(\"|').+?\\2/i", "",
$_POST['ldesc']);
+ $_POST['ldesc'] = preg_replace("/(style|on\\w+?)\s*=[^>]*/i",
"", $_POST['ldesc']);
if (!$_POST['ldesc']) {
$errors[] = "You must supply a long description of the event.";
}