$interbredcrump[] = array('url' => Url::Contextualize("../work/work.php"), 'name' => get_lang('Assignments')); $interbredcrump[] = array('url' => Url::Contextualize("../work/work_list.php?authId=" . $_REQUEST['authId'] . "&assigId=" . $assignmentId), 'name' => get_lang('Assignment')); $claroline->display->body->appendContent($dialogBox->render()); echo $claroline->display->render(); die; } if (isset($_REQUEST['submitWrk'])) { $formCorrectlySent = true; // if authorized_content is TEXT or TEXTFILE, a text is required ! if ($assignmentContent == "TEXT" || $assignmentContent == "TEXTFILE") { if (!isset($_REQUEST['wrkTxt']) || trim(strip_tags($_REQUEST['wrkTxt']), $allowedTags) == "") { $dialogBox->error(get_lang('Field \'%name\' is required', array('%name' => get_lang('Answer')))); $formCorrectlySent = false; $wrkForm['wrkTxt'] = ''; } else { $wrkForm['wrkTxt'] = $san->sanitize($_REQUEST['wrkTxt']); } } elseif ($assignmentContent == "FILE") { // if authorized_content is FILE we don't have to check if txt is empty (not required) // but we have to check that the text is not only useless html tags if (!isset($_REQUEST['wrkTxt']) || trim(strip_tags($_REQUEST['wrkTxt'], $allowedTags)) == "") { $wrkForm['wrkTxt'] = ''; } else { $wrkForm['wrkTxt'] = $san->sanitize($_REQUEST['wrkTxt']); } } // check if a title has been given if (!isset($_REQUEST['wrkTitle']) || trim($_REQUEST['wrkTitle']) == "") { $dialogBox->error(get_lang('Field \'%name\' is required', array('%name' => get_lang('Work title')))); $formCorrectlySent = false; $wrkForm['wrkTitle'] = '';
function claro_html_sanitize_editor($str) { static $san = null; if (empty($san)) { $san = new Claro_Html_Sanitizer(); $san->allowObjects(); } return $san->sanitize($str); }