Welcome! » Log In » Create A New Profile

HTMLPurifier does not work on the live site

Posted by Borj 
Borj
HTMLPurifier does not work on the live site
April 19, 2012 12:32AM

Hi,

I have downloaded and installed HTMLPurifier on my localhost, I have tested it very well and it works very fine, I thought my problem is over but when I uploaded it in the live site it seems not to work.

can you help me identify what could have been causing this?

thanks, Borj

Re: HTMLPurifier does not work on the live site
April 19, 2012 02:06AM

Hello Borj,

Do you get any error messages?

Hi,

this is the error I got:

Fatal error: Call to undefined function ctype_space() in /VEC/apache/PHP/htdocs/PH_OT1_iShine/PH_OT1_FB_STA/helper/htmlpurifier-4.4.0/library/HTMLPurifier/Token/Text.php on line 26

thanks, Borj

Re: HTMLPurifier does not work on the live site
April 19, 2012 11:15AM

Borj, your host is running a version of PHP without the ctype extension compiled. This is a standard module and HTML Purifier relies on it. Yell at your host.

Hi,

Thanks, Htmlpurifier is now working well after the host did some "works" on their end.

" onmouseover="alert('XSS Problem!')" "
Re: HTMLPurifier does not work on the live site
July 02, 2012 11:52AM

XSS

" onmouseover="alert('XSS Problem!')" "
" onmouseover="alert('XSS Problem!')" "
July 02, 2012 11:53AM

" onmouseover="alert('XSS Problem!')" "

Author:
Your Email:

Subject:

HTML input is enabled. Make sure you escape all HTML and angled brackets with < and >.

Auto-paragraphing is enabled. Double newlines will be converted to paragraphs; for single newlines, use the pre tag.

Allowed tags: a, abbr, acronym, b, blockquote, caption, cite, code, dd, del, dfn, div, dl, dt, em, i, ins, kbd, li, ol, p, pre, s, strike, strong, sub, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, var.

For inputting literal code such as HTML and PHP for display, use CDATA tags to auto-escape your angled brackets, and pre to preserve newlines:

<pre><![CDATA[
Place code here
]]></pre>

Power users, you can hide this notice with:

.htmlpurifier-help {display:none;}

Message: