聯系官方銷售客服
1835022288
028-61286886
投訴
已解決 評論輸入框改為百度編輯器以后，輸入內容提交，html標簽會被轉義掉。
13 0
評論輸入框改為百度編輯器以后，輸入內容提交，html標簽會被轉義掉。
控件代碼里取消了xss過濾還是不行。這是代碼，幫忙看下如何設置修改。
<?php echo str_replace("data[content]", "content",dr_fieldform('{"name":"簡單編輯器","fieldname":"content","ismain":"1","fieldtype":"Ueditor","setting":{"option":{"down_img":"1","watermark":"0","show_bottom_boot":"0","autofloat":"0","remove_style":"0","div2p":"0","autoheight":"0","page":"0","mode":"1","tool":"\'bold\', \'italic\', \'underline\'","mode2":"3","tool2":"\'bold\', \'forecolor\', \'link\', \'simpleupload\', \'underline\', \'source\', \'blockquote\'","mode3":"1","tool3":"\'bold\', \'italic\', \'underline\'","attachment":"0","image_reduce":"","value":"","width":"100%","height":"300","css":""},"validate":{"required":"0","pattern":"","errortips":"","xss":"1","check":"","filter":"","formattr":"","tips":""}},"ismember":"1"}', ""));?>
插件版權：官方插件
插件名稱：評論
編輯器本身就會轉義，輸出的時候使用函數dr_code2html就可以了
回復@官方插件技術-周若塵 這個是不是得在評論內容入庫的時候做處理？
用一樓的函數做顯示就對了，入庫肯定要被轉義啊，任何一個cms多要轉義
回復@守望天空 幫我看一下輸出代碼怎么寫，一知半解試了一下不管用 ?? ?? 下面是調用的輸入內容的原代碼。
{dr_replace_emotion($t.content)}{dr_replace_emotion(dr_code2html($t.content))}回復@可憐的碼農 測試了還是有問題，不知道是不是我沒說清楚問題。
重新整理下問題：
評論區的輸入框改為了百度編輯器輸入框，輸入內容比如：
提交之后顯示的評論內容為這樣：
也就是 < >都沒有了，只留下了其他的。
評論內容輸入框的代碼為：
<?php echo str_replace("data[content]", "content",dr_fieldform('{"name":"簡單編輯器","fieldname":"content","ismain":"1","fieldtype":"Ueditor","setting":{"option":{"down_img":"1","watermark":"0","show_bottom_boot":"0","autofloat":"0","remove_style":"0","div2p":"0","autoheight":"0","page":"0","mode":"1","tool":"\'bold\', \'italic\', \'underline\'","mode2":"3","tool2":"\'bold\', \'forecolor\', \'link\', \'simpleupload\', \'underline\', \'source\', \'blockquote\'","mode3":"1","tool3":"\'bold\', \'italic\', \'underline\'","attachment":"0","image_reduce":"","value":"","width":"100%","height":"300","css":""},"validate":{"required":"0","pattern":"","errortips":"","xss":"1","check":"","filter":"","formattr":"","tips":""}},"ismember":"1"}', ""));?>評論內容顯示的代碼按上述已修改為;
<div class="ds-comment-body"> <p> {dr_replace_emotion(dr_code2html($t.content))} </p> <div class="ds-replybox ds-replybox2 ds-inline-replybox " id="dr_reply_{$t.id}" style="display:none;"> </div> </div>{dr_code2html($t.content)}回復@司馬老賊 改過測試了還是一樣的問題，< 符號掉了，其他原樣子輸出
用我群里的論壇BBS模塊的代碼就可以了
技術大大幫我看看
確認了下，數據庫內的內容已經是不帶轉義字符的了，應該是前臺的百度編輯器過濾掉了html的<和>符號
我在9樓大哥群里下載的代碼就可以完美入庫編輯器評論
回復@小船無槳全靠浪 好的，我去看看