PHP code displaying in output pages

madhouse92

I have just installed a Support Helpdesk script but have noticed that on some of the user pages the PHP code itself is being displayed. For example take a look at http://leapfrogmdasupport.co.uk/helpdesk/servers.php . You will see that {TABLE-HEADING:' and '/} are displayed when it shouldn't be. I have taken a look at the .php file for this particular page but unfortunately my knowledge of PHP is very limited. This is the code in the file which I think is doing the damage:

	//--------------------------------

$code = $row_info['code'];

$code = addslashes($code);
$code = str_replace("\\'", "'", $code);

$code = eregi_replace("(TABLE-HEADING:[[:space:]]*\')(.[^\']*)(\'/)", eregi_replace("HEADING", "\\2", $GLOBALS['table_heading_html']), $code);
$indicator=0;
$code = eregi_replace("(USER-ROW:)([1|2]{1})(})(.[^{]*)(END-ROW/)", eregi_replace("ROW_HTML", "\\4", str_replace("COLOR", trim("\\2") == 1 ? "$CONF[alt_table_color_1]" : $CONF['alt_table_color_2'], $GLOBALS['table_row_html'] )), $code);

//--------------------------------

Can anyone tell me what needs to changed to resolve this problem? This occurs on more than one of the user pages, but if I can pointed in the direction of what needs to be done for this file hopefully I can work out how to fix the others myself.

uidzer0

what shows up on that page does not appear to be php, it looks like there is probly an accidental " or ' somwhere and that part of the script does not get parsed it get printed.

madhouse92

Fataqui - I think I've found the problem. When you asked to see the template table_heading_html I couldn't find it anywhere. So then I looked at source of the .php files and the HTML source of the pages displaying the PHP code to try and establish where the template "stuff" was within the program. To my amazement I found out that all the template headers etc are stored in the actual MySQL database. For example, this is the value for a field called calendar_header:

<span class="heading">Calendar</span>
<br />
Information such as network maintenance will appear on the calendar.
<br />
<br />
<Span class="heading">$the_month $year</span>
 <br />
{TABLE-HEADING:'<table width=100% cellpadding=0 cellspacing=0><tr>
		   <td width=14%><font color=white><b>Mon</b></font></td>
		   <td width=14%><font color=white><b>Tue</b></font></td>
		   <td width=14%><font color=white><b>Wed</b></font></td>
		   <td width=14%><font color=white><b>Thu</b></font></td>
		   <td width=14%><font color=white><b>Fri</b></font></td>
		   <td width=14%><font color=white><b>Sat</b></font></td>
		   <td width=14%><font 

color=white><b>Sun</b></font></td></tr></table>'/}

$calendar_rows

</table>

In this example you can see the {TABLE-HEADING:' which is incorrectly displaying in the browser. So I dug around a bit further and it appears that the installation script for the program creates a whole bunch of tables with some of them containing fields for these templates. Here's a short example of what is in the installation script:

INSERT INTO `$_SUBMIT[table_prefix]template_bits` VALUES ('', '1', 'iprequest_request', '<span class=\"heading\">IP Request</span>
<br />
Please fill in these details about your required IP addresses:
<br />
<br />
\$errors
<form action=\'\$PHP_SELF\' method=\"post\">
<input type=\"hidden\" name=\"request\" value=\"1\">
{TABLE-HEADING:\'IP Request\'/}
  {USER-ROW:1}
    <td>
      <table width=\"100%\" cellpadding=\"5\" cellspacing=\"0\">
        <tr>
          <td width=\"30%\" valign=\"top\">
            <b>Email Address:</b>
          </td>
          <td width=\"70%\">
            \$client_info[email]
          </td>
        </tr>
      </table>
    </td>
    {END-ROW/}

Is this normal for template headers, footers etc to kept in an MySQL database?