Bubble bug?

[balisto]

Hi, I just realized that there is a problem with bubble (at least with my 2 installations):
quotation marks ( " ) and inverted comma or apostrophes ( ' ) do not show up.
Example: Instead of the comment:

Let's try to be a "bit" nicer.

the output is

Lets try to be a bit nicer.

[balisto]

Hi! Can anybody confirm having the same problems? Or am I the only one?

Chris

[datahell]

It is not a bug. Bubbles does nt like html, quotes and other strange symbols so it filters them out.

[balisto]

Hi,

hmmm.... Strange symbols...? It(')s just ordinary English 

[rentasite]

Hi,

hmmm.... Strange symbols...? It(')s just ordinary English 

Yeap! Those are strange symbols.

[balisto]

why?

[datahell]

Sorry for my expression, I though it would be understandable. "Strange symbols" are special characters like these: #$%~`
Why? For security reasons.
Wait 1 minute to tell you how to remove this filter although I don't recommend this removal.

[datahell]

Instructions on how to remove this limitation (on your own risk).

Open file components/com_bubbles/bubbles.php
Go to line 335.
You will find this:
$patterns = array('/\$/', '/\#/', '/\^/', '/\'/', '/\"/', '/\&/', '/\`/', '/\</', '/\>/', '/\*/', '/\|/', '/\\\/');
Remove any element you wish to pass the test from the pattern array.
For instance to remove the double and the single quotes make the $patterns as follows:
$patterns = array('/\$/', '/\#/', '/\^/', '/\&/', '/\`/', '/\</', '/\>/', '/\*/', '/\|/', '/\\\/');

[balisto]

No, no. I got what you ment... I just don't understand why this ---> ("hello") and this ---> (it's) are considered as strange symbols. They are part of any language I know. French and English don't work without it!?

[balisto]

ahhhhhhhhhhh........ great. will try that. thanx

[rentasite]

No, no. I got what you ment... I just don't understand why this ---> ("hello") and this ---> (it's) are considered as strange symbols. They are part of any language I know. French and English don't work without it!?

It's not a language related matter. But has to do with the CODE.

[balisto]

@ datahell: It works fine for the single quotes. The output for double quotes is now it's html-code

Code: [Select]

" But I don't mind. I think double quotes are dispensable in messages. So will re-disable them. The single quotes were important. From your point of view (by knowing that you don't recommend it) you think it's quite a big security issue (only registered users will be able to write messages)?

@ supernet: Sure. I see that it's a code problem. I was just wondering what a forum (even a light one like bubble) is made for if users can't write messages in their propper language 

Thanks for your support,
Chris

[datahell]

No, it is not a security issue as mysql inserts automatically backslashes, but I always want to be sure in everything I develop that the application will be un-hackable under any circumstances.
double quotes are being converted to &quot; cause of the usage of the "htmlspecialchars" function a few lines bellow.

[balisto]

I see. So I'm not too worried for now 
Perhaps you can keep this issue in mind for future updates of bubble. Would be great to keep it "international"...

Cheers,
Chris

[datahell]

Some day I want to upgrade bubbles but I don't find free time to do it. If anyone wants to take this project and create an improved version he has my permission and my help.