#71 #73 bugfix

README.md

@@ -81,7 +81,7 @@ https://docs.genix.id/user-guide/installation/
 
 - Upload all files, except `inc/config/config.php`.
 - edit your site's config.php, 
-- add this new configuration 
+- add this new configuration if not exist
 ```php
 define('SITE_ID', 'type-random-chars');
 define('ADMIN_DIR', 'gxadmin');

inc/lib/Menus.class.php

@@ -358,7 +358,7 @@ class Menus
     {
         foreach ($vars as $k => $v) {
             
-            // print_r($v);
+            $v['order'] = Typo::int($v['order']);
             $sql = array(
                         'table' => 'menus',
                         'id' => Typo::int($k),
@@ -395,7 +395,7 @@ class Menus
             $sql = array(
                         'table' => 'menus',
                         'id' => $vars['id'],
-                        'key' => $vars['key'],
+                        'key' => $vars['key']
                     );
             $menu = Db::update($sql);
         }
@@ -407,7 +407,7 @@ class Menus
         $sql = array(
                     'table' => 'menus',
                     'where' => array(
-                                    'id' => $id,
+                                    'id' => $id
                                 ),
                 );
         $menu = Db::delete($sql);

inc/lib/Typo.class.php

@@ -307,7 +307,7 @@ class Typo
 //        $str = preg_replace('#on.*=["|\'](.*)["|\']#', '', $str);
         $str = preg_replace('#(?!<pre>.*?)(onload|onerror|onblur|onchange|onscroll|oninput|
         onfocus|onbeforescriptexecute|ontoggle|onratechange|onreadystatechange|onpropertychange|
-        onqt_error|onpageshow|onclick|onmouseover|onunload|event|formaction|actiontype|background)=("|\')(.*)("|\')(?!.*?</pre>)#', '', $str);
+        onqt_error|onpageshow|onclick|onmouseover|onunload|event|formaction|actiontype|background|oncut)=("|\')(.*)("|\')(?!.*?</pre>)#', '', $str);
         $str = preg_replace('#(.*?)(javascript:.*)(.*?)#', '', $str);
         //$str = preg_replace('#&lt;(.*?)script&gt;#', '', $str);
         return $str;