html tags stripped out in wordpressmu

最新推荐文章于 2024-10-10 11:15:29 发布

tengbintang

最新推荐文章于 2024-10-10 11:15:29 发布

阅读量646

点赞数

分类专栏： wordpress 文章标签： html tags filter user

本文链接：https://blog.csdn.net/tengbintang/article/details/6087518

版权

wordpress 专栏收录该内容

5 篇文章 0 订阅

订阅专栏

Problem description:

Embedded video code when submitting a new post is automatically stripped out.

Problem analysis:

Wordpressmu2.9.1 has this issue.

But wordpress 2.9.1 and wordpress3.0.1 works fine.

When deactivate all plugins,the issue still exits.so it is not a plugin conflict issue.

Searching on the internet somebody in a post mentioned that for security reasons(strip evil script) wordpress will strip out some html tags automaticlly.

Here

http://www.clickonf5.org/wordpress-mu/youtube-other-video-not-embedding-wordpress-mu/5820

So i added the tags needed for an embedded code one by one in wordpressmu.

Yes,it works!

Why wordpress does not need this code hacking?

Wordpress and wordpressmu both use a third party script called KSES for filtering html tags

( HTML/XHTML filter that only allows some elements and attributes )

the damned function that strips our text is wp_filter_kses().

    kses_init_filters() adds it as filter to 5 hooks, kses_init() calls this function, and it is added as action to init and set_current_user. All those functions are in kses.php

    Note the current_user_can('unfiltered_html'). That's the trick, kses_init() removes the filter from all hooks and adds it back if user can't use clean HTML.

     So, instead of hacking WordPress core or using codes to remove the filter, just set unfiltered_html role to uses that should have it,