jostreff/nsedit
1
0
Fork 0
mirror of https://github.com/tuxis-ie/nsedit.git synced 2025-06-07 00:47:00 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix escaping. Jtable shows (javascript-escaped) content. No other escaping is done on the content-field

Browse source 
For txt-records. First strip quotes surrounding the content and strip from slashes. Then, add slashes and quotes again. This maybe sub-optimal, but works for now.
This commit is contained in:
Mark Schouten 2014-05-26 13:45:03 +02:00
parent 2a6fd69192
commit 2eed9b39c0
2 changed files with 27 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

9
zones.php
View file

@ -58,7 +58,9 @@ function _create_record($name, $records, $input, $zoneurl) {
}
if (preg_match('/^TXT$/', $input['type'])) {
$content = addslashes($input['content']);
$content = stripslashes($input['content']);
$content = preg_replace('/(^"|"$)/', '', $content);
$content = addslashes($content);
$content = '"'.$content.'"';
}
@ -217,7 +219,6 @@ if ($action == "list" or $action== "listslaves") {
foreach ($rows['records'] as $idx => $record) {
$rows['records'][$idx]['id'] = json_encode($record);
$rows['records'][$idx]['name'] = htmlspecialchars($record['name']);
$rows['records'][$idx]['content'] = htmlspecialchars($record['content']);
if ($record['type'] == 'SOA') { array_push($soa, $rows['records'][$idx]); }
elseif ($record['type'] == 'NS') { array_push($ns, $rows['records'][$idx]); }
elseif ($record['type'] == 'MX') { array_push($mx, $rows['records'][$idx]); }
@ -241,9 +242,7 @@ if ($action == "list" or $action== "listslaves") {
}
$records =_create_record($name, $records, $_POST, $_GET['zoneurl']);
$ret = $records[sizeof($records)-1];
$ret['content'] = htmlspecialchars($ret['content']);
_jtable_respond($ret, 'single');
_jtable_respond($records[sizeof($records)-1], 'single');
} elseif ($action == "deleterecord") {
$todel = json_decode($_POST['id'], 1);
$records = getrecords_by_name_type($_GET['zoneurl'], $todel['name'], $todel['type']);