[geeklog-cvs] geeklog-1.3 config.php,1.69,1.69.2.1

geeklog-cvs-admin at lists.geeklog.net geeklog-cvs-admin at lists.geeklog.net
Mon May 26 07:56:51 EDT 2003


Update of /usr/cvs/geeklog/geeklog-1.3
In directory internal.geeklog.net:/tmp/cvs-serv18198

Modified Files:
      Tag: geeklog_1_3_7sr1_1
	config.php 
Log Message:
Fixed typos in US state names and added a warning about the dangers of adding some HTML tags to the set of allowable HTML.


Index: config.php
===================================================================
RCS file: /usr/cvs/geeklog/geeklog-1.3/config.php,v
retrieving revision 1.69
retrieving revision 1.69.2.1
diff -C2 -d -r1.69 -r1.69.2.1
*** config.php	13 Jan 2003 13:21:29 -0000	1.69
--- config.php	26 May 2003 11:56:49 -0000	1.69.2.1
***************
*** 356,361 ****
--- 356,365 ----
  // Parameters for checking words and HTML tags
  
+ // *** Warning: Adding the following tags to the list of allowable HTML can
+ // *** make your site vulnerable to scripting attacks!
+ // *** Use with care: <img> <span> <marquee> <script> <embed> <object> <iframe>
  $_CONF['allowablehtml'] = '<p>,<b>,<i>,<a>,<em>,<br>,<tt>,<hr>,<li>,<ol>,<ul>,<code>,<pre>';
  $_CONF['adminhtml'] = $_CONF['allowablehtml'] . ', <div>,<table>,<tr>,<td>,<th>';
+ 
  $_CONF['censormode']    = 1;
  $_CONF['censorreplace'] = '*censored*';
***************
*** 410,414 ****
          'NV'=>'Nevada',
          'NH'=>'New Hampshire',
!         'NJ'=>'New Jersy',
          'NM'=>'New Mexico',
          'NY'=>'New York',
--- 414,418 ----
          'NV'=>'Nevada',
          'NH'=>'New Hampshire',
!         'NJ'=>'New Jersey',
          'NM'=>'New Mexico',
          'NY'=>'New York',
***************
*** 428,432 ****
          'VA'=>'Virginia',
          'WA'=>'Washington',
!         'WV'=>'West Viginia',
          'WI'=>'Wisconsin',
          'WY'=>'Wyoming'
--- 432,436 ----
          'VA'=>'Virginia',
          'WA'=>'Washington',
!         'WV'=>'West Virginia',
          'WI'=>'Wisconsin',
          'WY'=>'Wyoming'





More information about the geeklog-cvs mailing list