CKEditor 4
Thu, 05/12/2011 - 08:16
#1
luchorengo
luchorengo's picture
Joined: 12/05/2011
Posts: 4

Missing span style tag from ajax jQuery to PHP




function debug(){
    var vcadena = JSON.stringify($("#ncuerpo").val(), null, 2);
    $.ajax({
        type: "POST",
        url: "/administrar/noticias/serverdebug",
        data: ({cadena:vcadena})
    });
}


public function serverdebug(){
       $datos = json_decode($this->input->post('cadena'));
        echo $datos;
    }


<p><span style="color:#CCCCCC">Im a colored string</span></p>


<p><span>Im a colored string</span></p>

:cry:
Top
Thu, 05/12/2011 - 11:22
typeof
typeof's picture
Joined: 24/04/2011
Posts: 99

Re: Missing span style tag from ajax jQuery to PHP

And what's exactly in your $this->input->post('cadena') ?
Top
Thu, 05/12/2011 - 17:01
luchorengo
luchorengo's picture
Joined: 12/05/2011
Posts: 4

Re: Missing span style tag from ajax jQuery to PHP

typeof wrote:And what's exactly in your $this->input->post('cadena') ?

Codeigniter uses 
$this->input->post('postVariable')
instead native PHP's method 
$_POST['postVariable']

If i print $this->input->post('postVariable') before json_decode i can see the string:
"<p>\n\t<span>Im a colored string</span></p>\n"

as u can see, style tag isnt there
Top
Thu, 05/12/2011 - 19:04
typeof
typeof's picture
Joined: 24/04/2011
Posts: 99

Re: Missing span style tag from ajax jQuery to PHP

And what about this one:
$.ajax({
        type: "POST",
        url: "/administrar/noticias/serverdebug",
        data: ({cadena:'"<p><span style=\\"color:#CCCCCC\\">Im a colored string</span></p>"'})
    });

Does it work ok?
Top
Thu, 05/12/2011 - 19:30
luchorengo
luchorengo's picture
Joined: 12/05/2011
Posts: 4

Re: Missing span style tag from ajax jQuery to PHP

typeof wrote:And what about this one:
$.ajax({
        type: "POST",
        url: "/administrar/noticias/serverdebug",
        data: ({cadena:'"<p><span style=\\"color:#CCCCCC\\">Im a colored string</span></p>"'})
    });

Does it work ok?

No it doesn't, but i found the problem.
The Input class has the ability to filter input automatically to prevent cross-site scripting attacks. If you want the filter to run automatically every time it encounters POST or COOKIE data you can enable it by opening your application/config/config.php file and setting this:
$config['global_xss_filtering'] = TRUE;


Just setting to FALSE solve the problem.
Thanks for fast replies
Top
Wed, 05/07/2014 - 14:14
aaminah1978
aaminah1978's picture
Joined: 10/08/2011
Posts: 8

Re: Missing span style tag from ajax jQuery to PHP

Just to be absolutely clear.:
$config['global_xss_filtering'] = FALSE;
and it´ did work alright ?

Tks
...... Aaminah :)

 

Top
Wed, 05/07/2014 - 18:26
(Reply to #6)
luchorengo
luchorengo's picture
Joined: 12/05/2011
Posts: 4

That's right!

That's right!

Top
Twitter Facebook Facebook Instagram Medium Linkedin GitHub Arrow down Phone Menu Close icon Check