CiviCRM Community Forums (archive)

I think the problem is caused by ckeditor.  I changed to the tinyMCE, and now it works ok.

Still looking for a solution, because the rest of my drupal site uses ckeditor.

Yeps, i was using the copy from word button

It happens in the custom fields i made. The problem is that it happens randomly and i have had a problem with any of the four fields i use here

- Omschrijving   
- Visie en missie
- Rol in het beleid
- Samenstelling

I added a screenshot of the custom fields dialog and of the contact edit form.

These pages are in my drupal admin section, so i can't give the url?

I recreated most of the customfields on the demo site and copied the text form my word file. I got the same error
I changed the editor to tinyMCE and it worked fine.

I can send a copy of the word document if you like to test.
I added a txtdocument whit the html code (via button code) that is visible in the editor. As far as i know this html code is ok.

 

In a similar CKEditor issue. Since installation of 3.2.1 -- using CKEditor in CiviEvents causes my left nav area to sink below content in IE8, it's fine in Firefox and Chrome. If I go in and change the editor to textarea and edit the event (keeping the HTML) all is well in each browser. It seems that CKEditor might be dropping a </div> somewhere. (I can't replicate this in the sandbox)

My current configuration has Drupal with CKEditor 3.2 and CiviCRM with CKEditor version 3.3.1. As there is now no longer a stand-alone version, can CiviCRM work with Drupal's install of the editor instead of having a duplication of the application? Is there an easy process to upgrade the CKEditor version within CiviCRM?

We are getting this same error on multiple 3.2.1 sites. One was an upgrade from 3.0.3 the other  as a clean install.

The errors happen on the system workflow messages which don't use a wysiwyg editor.

Here is the value of $result that is past to private function kick($result)

I have no idea how to interpret this so would appreciate some help.

Since the demo site seems to work, I took the text of the offline receipt message and tried to replace the html in our version.

Thanks
    Dave

Total impact: 75
Affected tags: xss, csrf, id, rfe, lfi, sqli

Variable: msg_title | Value: Contributions - Receipt (off-line)
Impact: 7 | Tags: xss, csrf, id, rfe, lfi
Description: Detects unknown attack vectors based on PHPIDS Centrifuge detection | Tags: xss, csrf, id, rfe, lfi | ID: 67

Variable: msg_subject | Value: {ts}Contribution Receipt{/ts}
Impact: 7 | Tags: xss, csrf, id, rfe, lfi
Description: Detects unknown attack vectors based on PHPIDS Centrifuge detection | Tags: xss, csrf, id, rfe, lfi | ID: 67

Variable: msg_text | Value: {if $formValues.receipt_text} {$formValues.receipt_text} {else}{ts}Thanks for your support.{/ts}{/if} {ts}Please print this receipt for your records.{/ts} =========================================================== {ts}Contribution Information{/ts} =========================================================== {ts}Contribution Type{/ts}: {$formValues.contributionType_name} {if $lineItem} {foreach from=$lineItem item=value key=priceset} --------------------------------------------------------- {capture assign=ts_item}{ts}Item{/ts}{/capture} {capture assign=ts_qty}{ts}Qty{/ts}{/capture} {capture assign=ts_each}{ts}Each{/ts}{/capture} {capture assign=ts_total}{ts}Total{/ts}{/capture} {$ts_item|string_format:"%-30s"} {$ts_qty|string_format:"%5s"} {$ts_each|string_format:"%10s"} {$ts_total|string_format:"%10s"} ---------------------------------------------------------- {foreach from=$value item=line} {$line.description|truncate:30:"..."|string_format:"%-30s"} {$line.qty|string_format:"%5s"} {$line.unit_price|crmMoney:$currency|string_format:"%10s"} {$line.line_total|crmMoney:$currency|string_format:"%10s"} {/foreach} {/foreach} {/if} {ts}Total Amount{/ts}: {$formValues.total_amount|crmMoney:$currency} {if $receive_date} {ts}Received Date{/ts}: {$receive_date|truncate:10:''|crmDate} {/if} {if $receipt_date} {ts}Receipt Date{/ts}: {$receipt_date|truncate:10:''|crmDate} {/if} {if $formValues.paidBy and !$formValues.hidden_CreditCard} {ts}Paid By{/ts}: {$formValues.paidBy} {if $formValues.check_number} {ts}Check Number{/ts}: {$formValues.check_number} {/if} {/if} {if $formValues.trxn_id} {ts}Transaction ID{/ts}: {$formValues.trxn_id} {/if} {if $ccContribution} =========================================================== {ts}Billing Name and Address{/ts} =========================================================== {$billingName} {$address} =========================================================== {ts}Credit Card Information{/ts} =========================================================== {$credit_card_type} {$credit_card_number} {ts}Expires{/ts}: {$credit_card_exp_date|truncate:7:''|crmDate} {/if} {if $customGroup} {foreach from=$customGroup item=value key=customName} =========================================================== {$customName} =========================================================== {foreach from=$value item=v key=n} {$n}: {$v} {/foreach} {/foreach} {/if} {if $formValues.honor_first_name} =========================================================== {$formValues.honor_type} =========================================================== {$formValues.honor_prefix} {$formValues.honor_first_name} {$formValues.honor_last_name} {if $formValues.honor_email} {ts}Honoree Email{/ts}: {$formValues.honor_email} {/if} {/if} {if $formValues.product_name} =========================================================== {ts}Premium Information{/ts} =========================================================== {$formValues.product_name} {if $formValues.product_option} {ts}Option{/ts}: {$formValues.product_option} {/if} {if $formValues.product_sku} {ts}SKU{/ts}: {$formValues.product_sku} {/if} {if $fulfilled_date} {ts}Sent{/ts}: {$fulfilled_date|crmDate} {/if} {/if}
Impact: 54 | Tags: xss, csrf, id, rfe, sqli, lfi
Description: Detects JavaScript DOM/miscellaneous properties and methods | Tags: xss, csrf, id, rfe | ID: 15
Description: Detects JavaScript language constructs | Tags: xss, csrf, id, rfe | ID: 20
Description: Detects JavaScript location/document property access and window access obfuscation | Tags: xss, csrf | ID: 23
Description: Detects nullbytes and other dangerous characters | Tags: id, rfe, xss | ID: 39
Description: Detects classic SQL injection probings 2/2 | Tags: sqli, id, lfi | ID: 43
Description: Detects basic SQL authentication bypass attempts 2/3 | Tags: sqli, id, lfi | ID: 45
Description: Detects basic SQL authentication bypass attempts 3/3 | Tags: sqli, id, lfi | ID: 46
Description: Detects code injection attempts 3/3 | Tags: id, rfe, lfi | ID: 60
Description: Detects unknown attack vectors based on PHPIDS Centrifuge detection | Tags: xss, csrf, id, rfe, lfi | ID: 67

Variable: IDS_user_agent | Value: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.127 Safari/533.4
Impact: 7 | Tags: xss, csrf, id, rfe, lfi
Description: Detects unknown attack vectors based on PHPIDS Centrifuge detection | Tags: xss, csrf, id, rfe, lfi | ID: 67

Centrifuge detection data
Threshold: 3.49
Ratio: 1.3857142857143
Converted: ((+++:


There is a validation error with your HTML input. Your activity is a bit suspicious, hence aborting

this has been fixed in 3.2.2

if u'd like u can just overwrite this file:

http://svn.civicrm.org/civicrm/branches/v3.2/CRM/Core/IDS.php

make sure u delete the templates_c directory after u update the file (we added msg_text to the exceptions list)

lobo