PHP code in CKEditor

Hi Jan,
Works for me here with :

CKEDITOR.config.protectedSource.push(/<\?[\s\S]*?\?>/g);

I am using a recent CKEditor snapshot FTW. Try that.

Thanks,
Zanpakutō

http://peterpetrik.com/blog/ckeditor-and-geshi-filter

My ckeditor.config.js has this:

 config.protectedSource.push(/<\?[\s\S]*?\?>/g); // PHP Code

Which means you shouldn't see any php code in the WYSIWYG window, only in the Source view.


Are you entering the php code in the WYSIWYG or in the Source view? From the symptoms you reference, it seems like you're trying to enter in WYSIWYG. Switch to Source view, enter your code, then save. See if that works.

I was able to replicate your error as well by using the code snippet you provided. Seems that having the php code enclosed within the img tag is the culprit, because if I take the php code out and place it by itself, all works as expected.

I would recommend you change your code to:

<?php echo 'write out the full image tag here' />

Does anyone have a different solution? I have the same problem with MANY pages that output the url using php code. Changing this to the above will last days.... Please help.

this patch

I'm pretty new to CKEditor, but I think I found a solution.

1.) Add the following line to config.js:

CKEDITOR.config.protectedSource.push(/<\?[\s\S]*?\?>/g);

2.) Make sure to add your php code from the 'Source' view of the editor.
3.) When outputting your mixed html/php from the database, (let's say it's $row['body']), do it like this:

<?php echo eval('?>' . utf8_encode($row['body']) . '<?php '); ?>

Step 1 prevents the <?php and ?> tags from being stripped before saving to the database. The default behavior strips these for security reasons, so this basically overrides this safety feature.

In Step 3, the

eval()

function basically helps preserve the switching in and out of php.

I'm not an expert in CKEditor, so if I got something wrong, please let me know, but I hope this helps piece it together for someone.

Now what we need is a way to somehow display the php code in a block in the WYSIWYG view, so if someone else is editing a page I inserted PHP into, they will see it (and hopefully not delete it). As it stands, they could delete it without ever knowing it unless they looked at the Source view. Any suggestions?

What would be the syntax to implement this per page on a case by case basis, so back-end editors can have it enabled and public side editors not have it enabled?

Hey guys,

I'm using OpenCart which makes use of CKEditor and am trying to input php to be ran on the cart's welcome screen.

I've added config.protectedSource.push(/<\?[\s\S]*?\?>/g); to the config file and I can confirm that when I save my source it appears to preserve the code correctly and no longer adds <!-- --> however the issue is that it does still add these when I leave the editor and attempt to look at the code on the main page.

Any suggestions?

Cheers