~倉木麻衣~ 寫:
所有的script字串都被代換掉了, 也許應該檢查一下rich edit 這個外掛是否有改到什麼\r
ps.我沒下載rich edit這個外掛, 所以現在也還不知道可能的問題點在那邊

謝謝您的解說!
此外掛在 viewtopic.php 的修改當中如下:
#
#-----[ OPEN ]------------------------------------------
#
viewtopic.php
#
#-----[ FIND around line number 1156 ]------------------------------------------
#
$row_color = ( !($i % 2) ) ? $theme['td_color1'] : $theme['td_color2'];
$row_class = ( !($i % 2) ) ? $theme['td_class1'] : $theme['td_class2'];
#
#-----[ AFTER, ADD ]------------------------------------------
#
//EDITOR START HERE
$message =str_replace ("","<",$message);
$message =str_replace ("",">",$message);
$message =str_replace ("&","&",$message);
$message =str_replace ("<br />","<br>",$message);
// Clear all onClick onMouseOver onMouseOut onMouseDown onMouseUp onMouseMove onBlur cursor
// position absolute visibility visible z-index
// Example <span onClick=alert('BOOOO')>Click here</span>
// will be replaced to <span =alert('BOOOO')>Click here</span>
// in this way your board won't mess up. Hope this will help.
$message = str_replace("<","
<",$message);
$message = str_replace(">",">
",$message);
$array_mess = explode ("
",$message);
$message = "";
foreach ($array_mess as $val){
if (preg_match("/</",$val) ){
$val = preg_replace("/onclick/si", "", $val);
$val = preg_replace("/onmouseover/si", "", $val);
$val = preg_replace("/onmouseout/si", "", $val);
$val = preg_replace("/onmousedown/si", "", $val);
$val = preg_replace("/onmouseup/si", "", $val);
$val = preg_replace("/onmousemove/si", "", $val);
$val = preg_replace("/onblur/si", "", $val);
$val = preg_replace("/cursor/si", "", $val);
$val = preg_replace("/position/si", "", $val);
$val = preg_replace("/absolute/si", "", $val);
$val = preg_replace("/visibility/si", "", $val);
$val = preg_replace("/visible/si", "", $val);
$val = preg_replace("/z-index/si", "", $val);
$val = preg_replace("/script/si", "", $val);
}
$message .=$val;
}
//EDITOR END HERE
#
#-----[ SAVE/CLOSE FILE ]------------------------------------------
#
而我將其中" $val = preg_replace("/script/si", "", $val); " 註解以後
select_expand_bbcode 也就恢復正常囉! 