Couple of notes for your testing:

- The Google Maps API key is saved in the Geolocator.php file as a commented line.

- You can test this functionality using the Property Listings menu item in the CMS.  I would just edit one of the current Property Listings entries and add a "2" onto the end of the name and try to save.  This is where the error occurs with the API key active.

Let me know if that's all you need for now.

When replace that and use our API key, I get this error:

str_contains(): Argument #1 ($haystack) must be of type string, float given

The raw log:

Array
(
    [logType] => exception
    [errno] => TypeError
    [errstr] => str_contains(): Argument #1 ($haystack) must be of type string, float given
    [errfile] => /home2/user/public_html/cmsAdmin/lib/common.php
    [errline] => 1011
    [exceptionCode] => 0
    [exceptionClass] => TypeError
    [exceptionTrace] => 
#0 /home2/user/public_html/cmsAdmin/lib/common.php(1011): str_contains(33.9919159, '\x00')
#1 /home2/user/public_html/cmsAdmin/lib/common.php(993): _request_sanitize(33.9919159)
#2 /home2/user/public_html/cmsAdmin/lib/Fields/BaseField.php(74): request('latitude')
#3 /home2/user/public_html/cmsAdmin/lib/common.php(495): Itools\CMSB\Fields\BaseField->getRequestValue(false)
#4 /home2/user/public_html/cmsAdmin/lib/menus/default/save.php(15): _getRecordValuesFromFormInput()
#5 /home2/user/public_html/cmsAdmin/lib/menus/default/actionHandler.php(68): include('/home2/user...')
#6 /home2/user/public_html/cmsAdmin/admin.php(59): require_once('/home2/user...')
#7 {main}
    [prevExceptionTrace] => 

    [externalFilePath] => /home2/user/public_html/cmsAdmin/lib/common.php
    [externalLineNum] => 1011
)

I can privately send you the API key if you want (if that matters).

There is something about this specific combination of characters.

So something in that function in CMS Builder is not liking the format of my key.

I don't want to share my API key here so not sure how to test?

When I have an empty value in the Google maps API here:

$GLOBALS['GEOCODER_GOOGLE_API_KEY']         = '';

I can save the record.

Obviously, we use this field to automatically add the lat/long of a property.

Once I add my API key, that's when I start getting that error.

We can edit and save basic fields - but on a more complex listing with many fields, we are getting the following error when trying to save:

#32538 - _request_sanitize(): Argument #1 ($input) must be of type array|string|null, float given, called in /home2/user/public_html/cmsAdmin/lib/common.php on line 993
/home2/user/public_html/cmsAdmin/lib/common.php on line 993
https://www.user---site--.com/cmsAdmin/admin.php

The raw log:

Array
(
    [logType] => exception
    [errno] => TypeError
    [errstr] => _request_sanitize(): Argument #1 ($input) must be of type array|string|null, float given, called in /home2/user/public_html/cmsAdmin/lib/common.php on line 993
    [errfile] => /home2/user/public_html/cmsAdmin/lib/common.php
    [errline] => 1004
    [exceptionCode] => 0
    [exceptionClass] => TypeError
    [exceptionTrace] => 
#0 /home2/user/public_html/cmsAdmin/lib/common.php(993): _request_sanitize(34.289655)
#1 /home2/user/public_html/cmsAdmin/lib/Fields/BaseField.php(74): request('latitude')
#2 /home2/user/public_html/cmsAdmin/lib/common.php(495): Itools\CMSB\Fields\BaseField->getRequestValue(false)
#3 /home2/user/public_html/cmsAdmin/lib/menus/default/save.php(15): _getRecordValuesFromFormInput()
#4 /home2/user/public_html/cmsAdmin/lib/menus/default/actionHandler.php(68): include('/home2/user...')
#5 /home2/user/public_html/cmsAdmin/admin.php(59): require_once('/home2/user...')
#6 {main}
    [prevExceptionTrace] => 

    [externalFilePath] => /home2/user/public_html/cmsAdmin/lib/common.php
    [externalLineNum] => 993
)

Any ideas that I can look at?

Thank you!

Thank you so much!! This worked perfectly!!

Thanks for your help before, I think all my changes are working based on what you replied with.

However, we are noticing more errors, this time they are appending the code onto the end of pagination links:

https://www.CLIENT.com/the-loop.php?date_year=&category=health_care_reform&filter=yes&page=1%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),

We are using the standard pagination code I believe:

<!-- START PAGINATION CODE --> 
<div class="pagelinks">
	<?php  
		if (@!$_GET['page']): $current_page = "1"; 
		else: $current_page = $_GET['page'];    
	endif;  ?> 
		
	<?php 
		$startNumber = max($current_page - 2, 1); 
		$endNumber   = min($current_page + 2, $the_loopMetaData['totalPages']); 
	?>

	<?php if ($the_loopMetaData['prevPage']): ?>
		<a href="<?php echo $the_loopMetaData['prevPageLink'] ?>"><img src="/images/arrow-left.png" border="0" /> prev</a>&nbsp;&nbsp;&nbsp;
		<?php if ($startNumber > '1'): ?>
			<a href="?<?php echo http_build_query(array_merge($_REQUEST, array( 'page' => '1' ))) ?> ">1</a> ...
		<?php endif ?> 
	<?php else: ?>
		&nbsp;  
	<?php endif ?>	

<?php foreach (range($startNumber,$endNumber) as $page): ?>
	
		<?php if ($page == $current_page): ?> 
		 <b>[<?php echo $page; ?>]</b> 
		<?php else: ?> 
		 <a href="?<?php echo http_build_query(array_merge($_REQUEST, array( 'page' => $page ))) ?>"><?php echo $page; ?></a> 
		<?php endif ?> 

	<?php endforeach; ?> 
	
	
	<?php if ($the_loopMetaData['nextPage']): ?>
		<?php if ($the_loopMetaData['totalPages'] > $endNumber): ?>
			... <a href="?<?php echo http_build_query(array_merge($_REQUEST, array( 'page' => $the_loopMetaData['totalPages'] ))) ?> "><?php echo $the_loopMetaData['totalPages'];?></a> 
		<?php endif ?> 
			&nbsp;&nbsp;&nbsp;<a href="<?php echo $the_loopMetaData['nextPageLink'] ?>">next <img src="/images/arrow-right.png" border="0" /></a>  
		<?php else: ?>   
			&nbsp;  
	<?php endif ?>							
</div>
<!-- /END PAGINATION CODE -->

Is there anything we can do to drop all the extra code they are testing with?

Thanks for any help!

Think I have a handle on making some changes to match what you have shown.   We have a bunch of echo statements that I'm now going to wrap in the PHP IF to mitigate those errors.

Thanks for the details.  Yes I am using the standard "whereRecordNumberInUrl()" function.  Here's some more info:

One of the errors is:

E_NOTICE: Trying to access array offset on value of type null
https://www.CLIENT.com/the-loop-detail.php?Get-Preventive-Care-Back-on-Track-201=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),
/home/CLIENT/CLIENT.com/the-loop-detail.php
Line number 34

#0 _errorlog_logErrorRecord() called at [/home/CLIENT/CLIENT.com/cmsAdmin/lib/errorlog_functions.php:64]
#1 _errorlog_catchRuntimeErrors() called at [/home/CLIENT/CLIENT.com/the-loop-detail.php:34]

Line 34 of that file

<title><?php if ($detailRecord['meta_title'] != ''): ?><?php echo $detailRecord['meta_title']; ?><?php else: ?><?php echo trim($detailRecord['title']).' | The Loop'; ?><?php endif ?></title>

All of the pages have the standard block like this:

// load detail record from 'the_loop'
list($the_loopRecords, $the_loopMetaData) = getRecords(array(
'tableName' => 'the_loop',
'where' => whereRecordNumberInUrl(0),
'loadUploads' => true,
'allowSearch' => false,
'limit' => '1',
'orderBy' => 'dragSortOrder DESC',
));
$detailRecord = @$the_loopRecords[0]; // get first record
if (!$detailRecord) { header("HTTP/1.1 301 Moved Permanently"); header( 'Location: /the-loop.php' ); } // redirect to list page if no record passed or found

// load list records from 'the_loop'
list($the_loopRecords, $the_loopMetaData) = getRecords(array(
'tableName' => 'the_loop',
'loadUploads' => false,
'allowSearch' => true,
'orderBy' => 'dragSortOrder DESC',
));

$relatedArticles = getRelatedArticles($detailRecord);
if (empty($relatedArticles)) { $recentArticles = getRecentArticles($detailRecord); }

The Apache log file shows this:

[Fri Apr 22 02:05:24.163989 2022] [:error] [pid 1405:tid 111776546576128] [client 149.104.108.14:47420] [client 149.104.108.14] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'son),' [file "/dh/apache2/template/etc/mod_sec3_CRS/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "65"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: son), found within ARGS:Get-Preventive-Care-Back-on-Track-201: 'nvOpzp; AND 1=1 OR (<'\\x22>iKO)),"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [hostname "www.CLIENT.com"] [uri "/the-loop-detail.php"] [unique_id "YmJv1BzcXMr4Wrpgip6P1AAAAUo"]

The client is hosted at Dreamhost and this is there Extra Security module helping to prevent these injections.

Let me know if there is anything else I can provide.  Also if there is a more secure place to upload files so only you see them, let me know and I can upload the entire file(s).

Thanks!

E_NOTICE: Trying to access array offset on value of type null
https://www.CLIENTDOMAIN.com/the-loop-detail.php?Family-Medical-Leave-Act-128=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),

Obviously the correct URL should be:
https://www.CLIENTDOMAIN.com/the-loop-detail.php?Family-Medical-Leave-Act-128

Seems bots or something is appending an encoded string onto the end of URLS.

Developer log doesn't show any referrer, so I'm guessing they are fishing for something?

Anyone know what they are looking for and what the best way to handle this is?  

Thanks for the info.

Have you had any experience with AJAX and Google as far as crawling ability.  As I see it, the main page contains no readable content for Google to crawl and index (because it's all dynamically inserted via JS).   How have you gotten around this?

-Kevin

This is fantastic and just what I needed.  Thank you for this.

After only spending 20 minutes or so, it's pretty obvious what's going on.  I'm hoping to get a chance to play around a bit more tomorrow.

Tell me if this is correct.....basically what you've done is separated the actual data call (the CMS Builder query) and the layout code of that data into another PHP page.  This page is what takes the data from CMS builder, and lays it out how you want it shown.  The ajax call on the index.php page takes that entire set of data and inserts it into the div (in this case the right div).

Does that sound like it?

If so, I can definitely use this.  However, it already has my mind working.  For example, I'm guessing if you wanted to work with the returned data in pieces (not as a whole HTML set), that you could adjust the body_ajax page to return raw data and then have the main jQuery handle it and write it out itself?  Taking this back to the other site I sent, for example I'm guessing you'd have to do something like this to get the jQuery to write out and fade in each row one at a time?  Because the current way grabs the entire data set, you could only fade the whole thing in.

Thank so much again.....I'm hoping others will see this and be able to take advantage of your generosity.   Maybe you guys could setup a code example on the interactivetools.com site to house some of this type of code examples?

-Kevin

Email sent off to you.  Thanks so much for looking into this.  You guys at Interactive Tools continue to be top notch when it comes to customer support and help.

-Kevin

Also, here's the HTML code that generates that page:

<?php include('./includes/cmsLibraries.php'); ?>
<?php

  // load records from 'swatches'
  list($swatchesRecords, $swatchesMetaData) = getRecords(array(
    'tableName'   => 'swatches',
    'perPage'     => '12',
    'loadUploads' => true,
    'allowSearch' => true,
  ));

?>
<!DOCTYPE html> 
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en-US" lang="en-US"> 
<head> 
<meta http-equiv="content-type" content="text/html; charset=utf-8" /> 
<meta name="viewport" content="width=1024" />
<title></title>
<meta name="Description" content="" />
<meta name="Keywords" content="" />
<link href="/styles.css" rel="stylesheet" type="text/css" />
<script type="text/javascript" src="/scripts/jquery-1.10.2.min.js"></script>
</head>

<body>

<div id="container">

<div id="left">
<br class="clear-both" /><br class="clear-both" />
<ul>
<li><a href="?color=red">red</a></li>
<li><a href="?color=yellow">yellow</a></li>
<li><a href="?color=green">green</a></li>
<li><a href="?color=blue">blue</a></li>
<li><a href="/">view all</a></li>
</ul>
</div>

<div id="right">

<?php $count = 0 ?> 
<?php foreach ($swatchesRecords as $record): ?>

<?php if ($count++ % 4 == 0): ?><br class="clear-both" /><br class="clear-both" /><?php endif ?>

<div style="width: 100px; height: 100px; float: left; margin-right: 10px; background-color: orange;">
  Title: <?php echo htmlencode($record['title']) ?><br/>
  Color (value): <?php echo $record['color'] ?><br/>
  Color (label): <?php echo $record['color:label'] ?><br/>
</div>

<?php endforeach ?>


<?php if (!$swatchesRecords): ?>
  No records were found!<br/><br/>
<?php endif ?>

<br class="clear-both" />
<br class="clear-both" />


<?php if ($swatchesMetaData['prevPage']): ?>
  <a href="<?php echo $swatchesMetaData['prevPageLink'] ?>">&lt;&lt;  prev</a>
<?php else: ?>
  &lt;&lt; prev
<?php endif ?>

- page <?php echo $swatchesMetaData['page'] ?> of <?php echo $swatchesMetaData['totalPages'] ?> -

<?php if ($swatchesMetaData['nextPage']): ?>
  <a href="<?php echo $swatchesMetaData['nextPageLink'] ?>">next &gt;&gt;</a>
<?php else: ?>
  next &gt;&gt;
<?php endif ?>

</div>

</div>

</body>
</html>


-Kevin

I'm wondering if it's possible you can nudge me in the right direction to get me started.

I setup a test page that shows the basic functionality we are going to code on the site:
http://sundial.lancermedia.net

This page is generated from CMS Builder.  It is setup to display 12 records per page, with pagination.  On the left I have colors setup and will re-search based on the color selected.  The only color that has more than 12 is red (to show a single color spilling onto a second page.

What I'm looking to do is turn the pagination and the color select links into AJAX calls, so that the page doesn't change, but the results change.

Any help would be greatly appreciated to get me started.  jQuery is called on the page.

Thanks!

-Kevin

We have a client that wants to mimic a store like this:

http://www.prismaticpowders.com/powder-coating-colors/

You'll notice clicking on a color in the wheel basically refreshes the list dynamically without a page change.  Also, the filter section allows multiple selections.  

I think CMS Builder would be good for most of this, just need to understand if I can do the AJAX part.

Any help would be appreciated.

-Kevin

Ticket sent with dev server info included.

-Kevin

The issue is not fixed in the latest for my client.  Still can't search in those sections.

Any ideas?

-Kevin

I have a client on 2.15 that the admin search is not working in certain sections.  When searching in the basic search box the page just returns the entire list.

After looking at that old post I replaced the code referenced in list_functions.php, but it didn't help.

Any ideas on this?  I can't get you access to this site right now so I'm hoping maybe we can work through this without access (otherwise I'll need to replicate in a dev environment).

If you have any questions on the section layout, let me know.

Thanks.

-Kevin

-Kevin

Thanks.

-Kevin

Figured it out.  

The problem itself - the HTTP 401 error seems to stem from having an .htaccess configuration where we are using a username/password to block access to the site while it's in development.  Seems that in some browsers, and some versions of Flash are not liking that authorization.  Basically even though the browser is authenticated, the flash player isn't, therefore the upload fails.  No idea why this effects certain browsers and versions of flash.

The reason I didn't see it on my other DEV site is because at the time I was using a IP block, not a username/password auth.  I just switched the other site to username/password and it failed to.  

Issue resolved.  We can use the HTML uploader until the site goes live....and then swtich it back to flash once the auth is removed.

-Kevin