Input.php, Xss_clean and Preg_Replace

one4all

Posted: 04 January 2007 09:43 AM

[ Ignore ]

Summer Student

Total Posts: 30

Joined 11-23-2006

Xss_clean function doesn’t work with PHP 5.2 versions.

Test near line 412 and 422 returns “null” with some content including accentuation (é, à, ê,...) for example.

preg_replace('#(&\#*\w+)[\x00-\x20]+;#u',"\\1;",$str);

preg_replace('#(&\#x*)([0-9A-F]+);*#iu',"\\1\\2;",$str); 

Dont’ know if it is linked to a PHP preg_replace bug in that version of PHP (or to the syntax of the preg_replace calls in Input library which are “not anymore supported” ?

Profile

‹‹ CI Stupidly Kills GET Data Typo: In Creating Libraries ››

Username		Remember Me?
Password		forgot password?

Post Marker Legend
	New posts	Hot Topic with new posts	New Poll	Moved Topic	Sticky topic
	No new posts	Hot Topic with no new posts	Old Poll	Closed Topic	Announcements

Visitor Statistics
The most visitors ever was 719, on June 06, 2008 10:16 AM
Total Registered Members:	66430	Total Logged-in Users:	37
Total Topics:	84795	Total Anonymous Users:	6
Total Replies:	455063	Total Guests:	244
Total Posts:	539858