Changeset 1669

Timestamp:

09/04/2007 03:28:02 PM (16 months ago)

Author:

driehle

Message:

fixed #137

Location:

trunk

Files:

• log.php (modified) (1 diff)
• scripts/bbcode.php (modified) (1 diff)

trunk/log.php

@@ -1 +1 @@
 <?php
  require('.'.DIRECTORY_SEPARATOR.'personal'.DIRECTORY_SEPARATOR.'settings.inc.php');
- require(JLOG_BASEPATH.'lang'.DIRECTORY_SEPARATOR.'lang-admin.inc.php');
 
  $get = strip($_GET);

trunk/scripts/bbcode.php

@@ -18 +18 @@
 
 function do_bbcode_url ($action, $attributes, $content, $params, $node_object) {
-    if ($action == 'validate') return true;
+    // URL auslesen
+    $url = isset($attributes['default']) ? $attributes['default'] : $content;
+    
+    // URL validieren (Fix #137)
+    if($action == 'validate') {
+        if('javascript:' == substr($url, 0, 11)) return false;
+        return true;
+    }
 
-    if (!isset ($attributes['default'])) {
-          if (strpos($content, "/") === 0) $content = JLOG_PATH.$content;
-        return '<a href="'.htmlspecialchars($content).'">'.$content.'</a>';
+    // Optik bei relativen URLs verbessern
+    if(!isset($attributes['default']) AND strpos($url, "/") === 0) {
+      $content = (isset($_SERVER['HTTPS']) ? 'https://' : 'http://') . $_SERVER['HTTP_HOST'] . $url;
     }
-    if (strpos($content, "/") === 0) $attributes['default'] = JLOG_PATH.$attributes['default'];
-    return '<a href="'.htmlspecialchars($attributes['default']).'">'.$content.'</a>';
+    return '<a href="' . htmlspecialchars($url) . '">' . htmlspecialchars($content) . '</a>';
 }