[pmwiki-users] Commentbox and blocklist2 - not stopping the nasties froom getting through

John Rankin john.rankin at affinity.co.nz
Tue Aug 2 17:29:58 CDT 2005


On Tuesday, 2 August 2005 9:58 PM, K.A.Bouton <k.a.bouton at reading.ac.uk> wrote:
>Does it not work because of this line in blocklist2
>
>if ($action != 'edit') return;

That would do it! That line should possibly read

if ($action != 'edit' && $action != 'comment') return;

or maybe

if (!($action == 'edit' || $action == 'comment')) return;

John
>
>
>> -----Original Message-----
>> From: John Rankin [mailto:john.rankin at affinity.co.nz] 
>> Sent: Tuesday, August 02, 2005 12:12 AM
>> To: Pmwiki-users at pmichaud.com; K.A.Bouton
>> Subject: Re: [pmwiki-users] Commentbox and blocklist2 - not 
>> stopping the nasties froom getting through
>> 
>> 
>> On Tuesday, 2 August 2005 12:29 AM, K.A.Bouton 
>> <k.a.bouton at reading.ac.uk> wrote:
>> >Commentbox doesn't seem to pickup blocked items written in the 
>> >cdommentbox - as I found to my unpleasant surprise this morning.
>> >
>> >If someone wants to spend that much time messing with my wiki - 
>> >anything else I can do to prevent them? Is there a fix for 
>> commentbox?
>> >
>> This is just a guess, but you might try:
>> 
>> add the following line to your "local/config.php" file, 
>> preferably near the top.
>>     if ($action=='edit' || $action=='comment') 
>> include_once('cookbook/blocklist2.php');
>> 
>> >From the look of it, the blocklist2 script only loads when
>> editing and posting a comment is not an 'edit' action.
>> 
>> Commentbox mimics pressing the 'Post' button on an edit form,
>> so depending on how Blocklist2 works, the 2 recipes might, with
>> a bit of luck, work happily together... Or they might not.
>> -- 
>> JR
>> --
>> John Rankin
>> 
>> 
>> 
>
>


-- 
JR
--
John Rankin






More information about the pmwiki-users mailing list