Loading

Author Topic: Comments in Admin  (Read 604 times)

sundance

  • Sr. Member
  • ****
  • Posts: 377
    • RexburgSwap.com
    • Email
Comments in Admin
« on: February 10, 2012, 06:31:07 pm »
I am having some issues with my comment area of the admin. It keeps saying I have comments but when I go to the comment page this is what I get:


It is completely blank. Is anyone else having this issue and can anyone help fix this?
Sundance

trains58554

  • Super Moderator
  • Hero Member
  • *****
  • Posts: 1815
  • The Ghostbuster
Re: Comments in Admin
« Reply #1 on: February 10, 2012, 07:05:57 pm »
Hi sundance,

I wonder if one of your comments maybe has a single quote in it. To check you will have to go into phpmyadmin and look at the comments in the database.

Jay

sundance

  • Sr. Member
  • ****
  • Posts: 377
    • RexburgSwap.com
    • Email
Re: Comments in Admin
« Reply #2 on: February 11, 2012, 01:48:06 am »
There were only two links to the left that had the word comment in them. I clicked on both. The first image is the first link, and the second two are from the second link. Which one do I need to look at and what do I need to do?:

Link 1


Link 2



(I hope there is no sensitive info in here)
Sundance

trains58554

  • Super Moderator
  • Hero Member
  • *****
  • Posts: 1815
  • The Ghostbuster
Re: Comments in Admin
« Reply #3 on: February 11, 2012, 02:12:49 am »
Hi

I do not think there is any sensitive information there but if you want you can remove the images as I have seen them. I have tried adding a quote to one of my comments and that did not cause any problems so there must be something else causing the problem. Maybe there is a javascript error if you have firebug for firefox or chrome you could open that and reload the comments page and see if there are any errors.

Jay

sundance

  • Sr. Member
  • ****
  • Posts: 377
    • RexburgSwap.com
    • Email
Re: Comments in Admin
« Reply #4 on: February 12, 2012, 06:26:58 am »
Not sure if I would be able to locate it at all. I am no good at navigating firebug
Sundance

sundance

  • Sr. Member
  • ****
  • Posts: 377
    • RexburgSwap.com
    • Email
Re: Comments in Admin
« Reply #5 on: February 13, 2012, 11:54:30 pm »
Any other way or instruction on locating it?
Sundance

akapar

  • Premium
  • Full Member
  • *****
  • Posts: 148
Re: Comments in Admin
« Reply #6 on: February 14, 2012, 11:34:19 am »
I also have the same issue. Comments were showing until several weeks ago but now no comments appear on admin page. I usually have to delete spam comments and I delete them directly using PhPMyAdmin or I find the ad from Manage Items and then click Comments to see comments related to the ad. But these are just workaround solutions...

rafl

  • Sr. Member
  • ****
  • Posts: 415
    • Anunturi
Re: Comments in Admin
« Reply #7 on: February 14, 2012, 04:39:28 pm »
 ;) maybe those comments are in disabled/expired items?

sundance

  • Sr. Member
  • ****
  • Posts: 377
    • RexburgSwap.com
    • Email
Re: Comments in Admin
« Reply #8 on: February 15, 2012, 09:27:54 pm »
Nope, my ads don't expire and I am also missing comments on current ads
Sundance

rafl

  • Sr. Member
  • ****
  • Posts: 415
    • Anunturi
Re: Comments in Admin
« Reply #9 on: February 15, 2012, 09:41:26 pm »
@Sundance
your page link under your picture is redirecting me to an absurd site (www. worldlifeexpectancy.com/country-health-profile/the country I am connecting from)

getting back to us,

I get this error on item submit

Code: [Select]
Warning: preg_match() expects parameter 2 to be string, array given in /homepages/20/d118606353/htdocs/wsb3756333702/oc-includes/htmlpurifier/HTMLPurifier/Lexer.php on line 316

Warning: preg_match() expects parameter 2 to be string, array given in /homepages/20/d118606353/htdocs/wsb3756333702/oc-includes/htmlpurifier/HTMLPurifier/Encoder.php on line 54

Warning: preg_match() expects parameter 2 to be string, array given in /homepages/20/d118606353/htdocs/wsb3756333702/oc-includes/htmlpurifier/HTMLPurifier/Lexer.php on line 316

Warning: preg_match() expects parameter 2 to be string, array given in /homepages/20/d118606353/htdocs/wsb3756333702/oc-includes/htmlpurifier/HTMLPurifier/Encoder.php on line 54

Warning: Cannot modify header information - headers already sent by (output started at /homepages/20/d118606353/htdocs/wsb3756333702/oc-includes/htmlpurifier/HTMLPurifier/Lexer.php:316) in /homepages/20/d118606353/htdocs/wsb3756333702/oc-includes/osclass/core/Cookie.php on line 94

Warning: Cannot modify header information - headers already sent by (output started at /homepages/20/d118606353/htdocs/wsb3756333702/oc-includes/htmlpurifier/HTMLPurifier/Lexer.php:316) in /homepages/20/d118606353/htdocs/wsb3756333702/oc-content/plugins/paypal/index.php on line 247
« Last Edit: February 15, 2012, 09:55:29 pm by rafl »

sundance

  • Sr. Member
  • ****
  • Posts: 377
    • RexburgSwap.com
    • Email
Re: Comments in Admin
« Reply #10 on: February 16, 2012, 08:15:20 pm »
Could it be that I have been hacked? What should I do to combat that?
Sundance

trains58554

  • Super Moderator
  • Hero Member
  • *****
  • Posts: 1815
  • The Ghostbuster
Re: Comments in Admin
« Reply #11 on: February 16, 2012, 08:23:27 pm »
Hi sundance,

Here is the fixes you need to do oc-includes/osclass/core/Params.php

https://github.com/osclass/OSClass/commit/e8dff983a0ad1eb350ecde84bed4f97961499bfb

After you apply the fixes it should take care of the errors you are receiving.

Jay

sundance

  • Sr. Member
  • ****
  • Posts: 377
    • RexburgSwap.com
    • Email
Re: Comments in Admin
« Reply #12 on: February 16, 2012, 09:12:30 pm »
My lines don't match theirs. My lines 105-111 read:
$config = HTMLPurifier_Config::createDefault();
                    $config->set('HTML.Allowed', 'b,strong,i,em,u,a[href|title],ul,ol,li,p[style],br,span[style]');
                    $config->set('CSS.AllowedProperties', 'font,font-size,font-weight,font-style,font-family,text-decoration,padding-left,color,background-color,text-align');
                    $config->set('Cache.SerializerPath', ABS_PATH . 'oc-content/uploads');
                    self::$purifier = new HTMLPurifier($config);
                }
                foreach($value as $k => $v) {
Sundance

rafl

  • Sr. Member
  • ****
  • Posts: 415
    • Anunturi
Re: Comments in Admin
« Reply #13 on: February 16, 2012, 09:21:10 pm »
If this can be of help, I have:

Code: [Select]
static private function _purify($value, $xss_check)
        {
            self::$config = HTMLPurifier_Config::createDefault();
            $allowed = 'b,strong,i,em,u,a[href|title],ul,ol,li,p[style],br,span[style],img[width|height|alt|src]';
            $allowed .= 'object[align<bottom?left?middle?right?top|archive|border|class|classid|codebase|codetype|data|';
            $allowed .= 'declare|dir<ltr?rtl|height|hspace|id|lang|name|onclick|ondblclick|onkeydown|onkeypress|onkeyup|';
            $allowed .= 'onmousedown|onmousemove|onmouseout|onmouseover|onmouseup|standby|style|tabindex|title|type|usemap|vspace|width]';
            self::$config->set('HTML.Allowed', $allowed);
            self::$config->set("HTML.SafeEmbed", true);
            self::$config->set("HTML.SafeObject", true);
            self::$config->set('CSS.AllowedProperties', 'font,font-size,font-weight,font-style,font-family,text-decoration,padding-left,color,background-color,text-align');
            self::$config->set('Cache.SerializerPath', ABS_PATH . 'oc-content/uploads');

            if( !$xss_check ) {
                return $value ;
            }

            if( !isset(self::$purifier) ) {
                self::$purifier = new HTMLPurifier(self::$config);
            }

            if( is_array($value) ) {
                foreach($value as $k => &$v) {
                    $v = self::_purify($v, $xss_check) ;
                }
            } else {
                $value = self::$purifier->purify($value) ;
            }

            return $value ;
        }

sundance

  • Sr. Member
  • ****
  • Posts: 377
    • RexburgSwap.com
    • Email
Re: Comments in Admin
« Reply #14 on: February 17, 2012, 05:46:24 am »
Can I get that file again since mine doesn't even seem to be the same?
Sundance