Forums

Style tag destroyed

Denis L. 21 Jul, 2014
Hi,

I have a client's site that runs on Joomla! 2.5.19 and Chronoform 4.0 RC3.3 and never had any problems.

But today, when they create a new contact form, in the form code, the style tag gets destroyed on form save. It should be like this arrow-right <style type="text/css"> but after saving, there is a "-" added in the tag between the "s" and the "t" like this arrow-right <s-tyle type="text/css"> and it breaks the code. And if I go save an existent working form, the tag gets broken to.

Please help me fix this quickly for my client! Here is the site and the broken form code's results. http://www.obvm.org/joindre-anais

Thank!
Denis L. 21 Jul, 2014
Just updated their Joomla! 2.5.19 to 2.5.20 but no change... style tag still gets broken.
Denis L. 22 Jul, 2014
Answer
OK for those it might interest, the problem comes from RSfirewall.

Here is what I found on the Net for a solution...

« Scrambled tags (iframe becomes i-frame)
If you are trying to add a script, style or iframe tag in one of your Joomla! articles or 3rd party component and the tag is scrambled after you save your changes, this is caused by one of the protection filters applied by RSFirewall! : the JS Protections filter. This option will help protect you agains javascript injections by disrupting the starting tags, for example an <iframe> tag will be changed to <i-frame>
In order to avoid this filtering you can:
add the IP of the working PC you are using in the RSFirewall! whitelist(Components > RSFirewall! > Blacklist/Whitelist) - this way all the security filters and restrictions applied by the component will be ignored for your IP
add an exception in the RSFirewall! - Exceptions tab - you can read more about these exceptions here
edit the JS Protections settings from the Active Scanner configuration(Components > RSFirewall! > Firewall Configuration > Active Scanner) and disable the filter for POST or GET data depending on your scenario »

Hope it helps... case closed.
GreyHead 22 Jul, 2014
Hi Denis L.,

Later: I only saw your note on RS FireWall after posting this :-(

I've never seen this reported for ChronoForms v4 (or v5). My best guess is that there is some kind of admin or server security plug-in that is changing the code.

Where exactly are you adding this tag? Have you tried using a Load CSS action instead?

Bob
This topic is locked and no more replies can be posted.