Xinha Discussion Forum

you need a

xinha_editors.yourEditor.activateEditor()

I'm guessing ?

My feeling is that it is a gecko bug, or actualy it could be a side-effect of EnterParagraphs plugin (usually loaded automatically in Xinha when running on Gecko).

If you submit a bug report about this, I will look more closely and see about cleaning it up client-side.

I see.  No.  Not currently, that is not possible.  Patches are welcome though, seems like a good idea.

GetHtml provides a speedier means of taking the HTML from Xinha and putting it back into your editor before you submit the form or switch to "source" mode.  The built in method works by traversing the DOM of the html being edited, which is a fairly slow operation, but easy to read/understand, maintain and modify, while GetHtml works with a bunch of regular expressions and such, which is fast, but more difficult to code.

In xinha_init, comment out the startEditors line.

Then to start the individual editors, after running xinha_init, you can do

xinha_editors.yourEditorIdHere.generate();

for each one.

Cannot be done.  Not without you modifying the ImageManager to do it.

Random: are you doing activateEditor and deactivateEditor at the appropriate times?  You must deactivate before changing the visibility and activate after restoring (or if you just leave it deactiveated it will activate when you click in it).

No, you would have to initialize it on first display.  This is due to a bug in either gecko or IE, I forget which, which means that getting sizes and such is not possible when elements are set to display:none (well, not strictly a bug, because if it's display:none then it has no size!).

No reason you can't initialize your editor(s) on first display instead of onload though - but it's left as an excercise in javascript for you :-)

If you can post a URL to your install we can have a look.

Did you turn off warnings?

Ok, some PHP 101, this code (incomplete of course) shows how one might handle modifying a record of a database table..

<?php
  // ... connect to database etc ...
 
  // First, get rid of magic quotes if they were added in, magic quotes are evil
  if(get_magic_quotes_gpc())
 {
   foreach(array_keys($_REQUEST) as $k)
  {
    if(!is_scalar($_REQUEST[$k])) continue;
    $_REQUEST[$k] = stripslashes($_REQUEST[$k]);
  }
 }

  // Now was the form submitted?
  if(isset($_REQUEST['Submit']))
  { 
     // Yes, lets update the data 
     mysql_query("UPDATE Blah SET FOO = '" . mysql_real_escape_string($_REQUEST['FOO']) 
                     . "' WHERE BlahID = " . ((int) $_REQUEST['BlahID']));
  }

  // We presume we were given BlahID on the request, lets get the value
  $q = mysql_query("SELECT FOO From Blah where BlahID = " . ((int) $_REQUEST['BlahID']));
  $r = mysql_fetch_assoc($q);
  $FOO = $r['FOO'];
  

  // Lets display a form, if FOO was submitted already, lets put that in the value for example sake
  ?>
 <form action="<?php echo $PHP_SELF ?>" method="post">
   <input type="hidden" name="BlahID" value="<?php echo htmlspecialchars($_REQUEST['BlahID']) ?>" />
   <textarea name="FOO"><?php echo htmlspecialchars($FOO) ?></textarea>
   <input type="submit" name="Submit" value="Submit" />
 </form>

See how we stripslashes from the request variables if magic quotes has been turned on (the procedure above is just a trivial example, you should use a better one because REQUEST could contain arrays of values of course), we escape the string value being put into the SQL, and we cast the BlahID to an int to be sure that we don't put in anything nasty from the user.  Then when writing out the form we use htmlspecialchars to "escape" the special characters both for the value="" attribute and inside the textarea, which are both #PCDATA (see HTML specification).

Here is a better function for cleaning up after magic quotes does it's dirty business...

    function clean_magic_quotes()
    {
      set_magic_quotes_runtime(0);
      if(get_magic_quotes_gpc())
      {
        // trigger_error('Magic Quotes GPC is on, cleaning GPC.', E_USER_NOTICE);
        $to_clean = array(&$_GET, &$_POST, &$_REQUEST, &$_COOKIE);
        while(count($to_clean))
        {
          $cleaning =& $to_clean[array_pop($junk = array_keys($to_clean))];
          unset($to_clean[array_pop($junk = array_keys($to_clean))]);
          foreach(array_keys($cleaning) as $k)
          {
            if(is_array($cleaning[$k]))
            {
              $to_clean[] =& $cleaning[$k];
            }
            else
            {
              $cleaning[$k] = stripslashes($cleaning[$k]);
            }
          }
        }
      }
    }

If you are escaping, and still have magic_quotes on, then you're going to be double escaping.  Sounds also like you might not be using htmlspecialchars()/htmlentities() in the appropriate places.