Hi, i have installed nukeWYSIWYG on my chatserv patched PHPNuke 7.8. I have commented out the lines in javascript.php to prevent tinymce from loading and fckeditor seems to work perfectly. But one problem is that when, for example, I add an image and post... well here is an example:

Code: <img src="http://www.mysite/com/media/2006/03/image.png" alt="" />

becomes

Code: <img />

all attributes from any tag are stripped. font, span, div, you name it. it may be a problem with kses... but my config.php is all set with the new allowedhtml in the readme and the old one is commented out. help?

I just tried this on my installation and it works. I am wondering, did you replace the check_html() function in mainfile.php with the one from nukeWYSIWYG?

The original check_html function could be stripping these if you are still using it.

Also, are you by chance using the 3.2 patches?

Yes, I have replaced the check_html with the nukewysiwyg one. I also am using the 3.2 patch, too. Thanks for your help!

EDIT: I was looking at my config.php and I saw this at the bottom of it:

Code: // Nuke Patched 4.0

Is there even a 4.0 out? I'm pretty sure I used 3.2

The latest patched series is indeed 3.2 so I have no idea wht that should appear in your nuke config.php file, seems rather odd to me!

If you are still having this issue with 7.8 then there must some more security checking code that is loaded elsewhere which is peculiar to nuke 7.7+ as I and others are not able to reproduce this issue with nuke 7.6 patched.

Yeah, I cannot find any references to Nuke Patched 4.0 anywhere either. Tried Google and Yahoo as well as in my internal nuke files. I found 3.1, but not 4.0. But, then again, I am not running anything above 7.6 at the moment.

maybe the 3.2 creaters made a typo? not sure...

does anyone have 7.8 to test this on? i really like fckeditor and would hate to have to discontinue using it..

EDIT: I have fixed it! maybe kguske can advertise a nukewysiwyg package for 7.8 with this info:

in the news/admin/index.php, a addslashes is called on the text before it is passed into check_html. thus, this:

Code: <img src="http://www.mysite/com/media/2006/03/image.png" alt="" />

becomes this:

Code: <img src=\"http://www.mysite/com/media/2006/03/image.png\" alt=\"\" />

for some reason, kses doesnt like this and strips the attributes. the fix is to go thru all the post_story functions and other like functions and remove the addslashes. i know there are alot of these and they must be removed in the reviews module and other modules where you plan to use fckeditor. but it works.

still havent figured out where that mysterious Nuke Patched 4.0 came from. maybe my site made a trip to the future

Yes, the 3.2 patches are causing issues with sites that have "magic quotes" turned on. There was no "discrimination" used in the use of the addslashes and stripslashes. Unfortunately, the issue is all over the place. One possible thing to try is adding this to your .htaccess file:

PHP_FLAG magic_quotes_gpc Off

With magic quotes on, input coming in from GET/POST will already have the slashes added, so, in effect, that addslashes is duplicating that unnecessarily (to a fault).