Ok... Here we are ! The pncUserHack v1.6 (or whatever version I wished to call it) is in great danger.
Why ? Because somehow, it may be possible that the security in pn is so High that it is at the moment impossible to have multiple select field.
And without it... what's the point of making a Hack HTML 1.0 when we are at 4 or 5 (I don't even remember !).
So here is the problem.
Form that will show the values we can select :
I put only an example of the essential.
[php] echo "\n"; // If there are some that ask themselves why // there is [] at the end of dynafield['_TESTFIELD'], // It is the way to tell it's an array that will be // filled with the selectable values. Anyway.... [/php]
etc.....
Now, the function receiving the values is the next thing to happen... there is nothing in between.
[php] function blablabla() { $dynafield = pnVarCleanFromInput('dynafield'); // Returns the _TESTFIELD And the word Array... // Yea, I assure you... it returns the word Array. $dynafield = $_POST['dynafield']; // Returns the _TESTFIELD and the REAL ARRAY containing // the values. // Unfortunatly, using $_POST is of course // out of the question for security. // But... if pnVarCleanFromInput doesn't return // the good values............................. [/php]
HTML Speaking and php speaking... it's quite basics... but because of the security verification that does its job quite... too well I must say, if someone has a solution, write me to :
oulala@pnconcept.com
I won't touch the pnAPI.php, better warn you.
Also... there is a thing that must be said... the reason why it doesn't work may be evident for some php and pn gurus but it is not for me. If you want to laugh or throw me an Axe in the head for my stupidity... well, just tell me the solution... I'll put an axe in my head myself if it is that stupid.
Needless to say that the code itself has no bug, it was tested long before deciding to write this.
pnVarCleanFromInput really returns a bad value while $_POST does it just fine.
If there is no solution to this, security prevails and the pncUserHack may never get farther because I won't do it again.
Have fun !
Chestnut !
http://dev.pnconcept.com
http://www.postnuke-france.org
UPDATE 30/04/2003
Thanks to [ Kilroy ], here are the 2 functions that will be used for the pncUserHack only at selected time and for the hack...
[ Click Here ]
Those come from pn714 so I will make them pn723, don't worry.
Chestnut !
Why ? Because somehow, it may be possible that the security in pn is so High that it is at the moment impossible to have multiple select field.
And without it... what's the point of making a Hack HTML 1.0 when we are at 4 or 5 (I don't even remember !).
So here is the problem.
Form that will show the values we can select :
I put only an example of the essential.
[php] echo "\n"; // If there are some that ask themselves why // there is [] at the end of dynafield['_TESTFIELD'], // It is the way to tell it's an array that will be // filled with the selectable values. Anyway.... [/php]
etc.....
Now, the function receiving the values is the next thing to happen... there is nothing in between.
[php] function blablabla() { $dynafield = pnVarCleanFromInput('dynafield'); // Returns the _TESTFIELD And the word Array... // Yea, I assure you... it returns the word Array. $dynafield = $_POST['dynafield']; // Returns the _TESTFIELD and the REAL ARRAY containing // the values. // Unfortunatly, using $_POST is of course // out of the question for security. // But... if pnVarCleanFromInput doesn't return // the good values............................. [/php]
HTML Speaking and php speaking... it's quite basics... but because of the security verification that does its job quite... too well I must say, if someone has a solution, write me to :
oulala@pnconcept.com
I won't touch the pnAPI.php, better warn you.
Also... there is a thing that must be said... the reason why it doesn't work may be evident for some php and pn gurus but it is not for me. If you want to laugh or throw me an Axe in the head for my stupidity... well, just tell me the solution... I'll put an axe in my head myself if it is that stupid.
Needless to say that the code itself has no bug, it was tested long before deciding to write this.
pnVarCleanFromInput really returns a bad value while $_POST does it just fine.
If there is no solution to this, security prevails and the pncUserHack may never get farther because I won't do it again.
Have fun !
Chestnut !
http://dev.pnconcept.com
http://www.postnuke-france.org
UPDATE 30/04/2003
Thanks to [ Kilroy ], here are the 2 functions that will be used for the pncUserHack only at selected time and for the hack...
[ Click Here ]
Those come from pn714 so I will make them pn723, don't worry.
Chestnut !


