Help:Caveats

From phpCMS

[edit] Automatic text replacement / insertion

The Wiki-software sometimes automatically manipulates content or adds additional text to the posted content. Mainly this is to keep posters from putting in malicious code.

An example of those changes:

<a href="http://www.example.com" 
   onmouseover="window.status='Just an example';return true;">
 Example link
</a>

will automatically be changed to

<a href="http://www.example.com" 
   onmouseover="if(typeof(this.href) != 'undefined') window.status = 'Just an example' + 
                ' URL: ' + this.href;else return false;return true;">
 Example link
</a>

This is usually okay, as the change (adding additional text to the status line that contains the destination URL) will help visitors to see where they're going. Unfortunately, the Wiki Software does this even within a <nowiki>...</nowiki> block, which is undesired, as it will break proper example code (and might lead to the additional texts being added over and over again)

Now, what to do? We still want the code to show up, and we want users to be able to copy&paste an example right from the Wiki into their code.

Solution: Make sure the Wiki doesn't recognize the keyword it uses for replacing. Determining the keyword that triggers this text enhancement might be the trickiest part, but can be done in the Sandbox. As the Wiki replacement strategy works even when only previewing a page, it's not even nessesary to save this.

Now, how can you mask the keyword you identified? In the abovementioned example, the keyword is window.status. In the edit-field, simply write window&#46;status (46 being the 'ASCII-Code' of the dot). The result will be the intended text, as web-browsers replace the &#46; with a '.', but the Wiki-Software won't find it's keyword and ignores the code. Thus, the solution is simple: Replace at least one character from the keyword with it's HTML-Entity representation, and your code will stay unharmed.

--Guandalug la'Fay 21:05, 14 Apr 2005 (CEST)