after update to 2.1 > comments '<'.removeEvilAttributes('b

[EGYPT]

hello phpM Team
i noticed that after updating my website from v2.0.1 to v2.1
my comments system allow to anyone and i use blacklist function ,
every comment from visitors .. after submit comment , write automatically [b]'<'.removeEvilAttributes('br /').'>'[/b]
screen shot
[img]http://img855.imageshack.us/img855/703/scog.jpg[/img]
thanks in advance

[ciberlinker]

I have the same problem..

[muzikia]

Change the comment system to the disqus. no more spam or other issues I've seen here and unsolved.
Here it is a tutorial: http://www.modmyscript.com/add-disqus-o ... elody-2-x/

[ciberlinker]

[quote="muzikia"]Change the comment system to the disqus. no more spam or other issues I've seen here and unsolved.
Here it is a tutorial: http://www.modmyscript.com/add-disqus-o ... elody-2-x/[/quote]
Muzikia the problem is not only in the comments ..
[url=http://imageshack.com/i/0k5oy2g][img]http://imageshack.com/a/img20/534/5oy2.gif[/img][/url]
a greeting

[muzikia]

check it here
viewtopic.php?p=60530&f=6#p60530

[Trace]

Solution
In /include/functions.php FIND[code]function removeEvilTags($source)
{
global $allowedTags;
$source = RemoveCurseWords(strip_tags($source, $allowedTags));
return preg_replace('/<(.*?)>/ie', "'<'.removeEvilAttributes('\\1').'>'", $source);
}[/code]
REPLACE WITH[code]function removeEvilTags($source)
{
global $allowedTags;
$source = RemoveCurseWords(strip_tags($source, $allowedTags));
return preg_replace_callback('/<(.*?)>/i', 'removeTagAttributes', $source);
}
function removeTagAttributes($in){
return '<'.removeEvilAttributes($in).'>';
}[/code]

Note: this will only fix new comments, the ones that are broken will remain broken

[ciberlinker]

Thanks Trace

[adysnake]

Thanks Trace !!

[mephisto]

Thanks Trace, been upgrading my old phpmelody 1.6.x to php 7.2 and this was one of the remaining issues.