HTML allowed in forum profiles?

  Post new topicReply to topicPrintable Version
<< View previous topic View next topic >>
Share: Del.icio.us  Digg  Google  Spurl  Blink  Furl  Y! MyWeb  
#1   HTML allowed in forum profiles?
jaymullah
CZ Super Newbie
jaymullah has been a member for over 20 year's 20 Year Member
usa.gif northcarolina.gif
Occupation: Freelance Webdesign
Age: 44
Gender: Male
Website:
Status: Offline
Joined: Jan 11, 2004
0.01 posts per day
Posts: 40
Points: 3,244
 Yahoo Messenger MSN Messenger 
Sorry if this has been answered, I've searched but no luck yet so posting for help icon_smile.gif

There are a few fields in the forum profile that I would like to allow some basic HTML. How can I change it so that only certain (or all if I have to) allows some html. Right now if you enter HTML is displays the code as text.

Does it have anything to do with this part of the code in usercp_register.php :

$music = stripslashes($music);


or

$music = htmlspecialchars(stripslashes($music));



I have HTML Allowed checked in forum config, and also entered all the most basic HTML tags in the allowed HTML field.


Thanks for any help.

[ Register or login to view links on this board. ] using PHP Nuke Platinum ver? (nuke 7.6 I believe)


Back to top Reply with quote
#2   
Telli
Site Admin
Occupation: Self Employed
Age: 46
Gender: Male
Fav. Sports Team: Detroit Red Wings
Website:
Status: Offline
Joined: May 26, 2003
1.03 posts per day
Posts: 8089
Points: 494,440
   
You could remove this:


htmlspecialchars()


But I wouldnt suggest it.



_________________
The path of the righteous man is beset on all sides by the inequities of the selfish and the tyranny of evil men. Blessed is he, who in the name of charity and good will, shepherds the weak through the valley of darkness, for he is truly his brother's keeper and the finder of lost children. And I will strike down upon thee with great vengeance and furious anger those who would attempt to poison and destroy my brothers. And you will know my name is the Lord when I lay my vengeance upon thee. Ezekiel 25:17
Back to top Reply with quote
#3   
jaymullah
CZ Super Newbie
jaymullah has been a member for over 20 year's 20 Year Member
usa.gif northcarolina.gif
Occupation: Freelance Webdesign
Age: 44
Gender: Male
Website:
Status: Offline
Joined: Jan 11, 2004
0.01 posts per day
Posts: 40
Points: 3,244
 Yahoo Messenger MSN Messenger 
I figured there would be security risks by removing it. I wont do it that way, is there any other way to allow basic HTML?

I have added a lot of extra fields to the profiles on my site. A lot of them I would like my users to be able to add images or edit their text using html. But if the only way of doing that creates security issues, I wont do it icon_smile.gif


Thanks for the help



Back to top Reply with quote
#4   
Telli
Site Admin
Occupation: Self Employed
Age: 46
Gender: Male
Fav. Sports Team: Detroit Red Wings
Website:
Status: Offline
Joined: May 26, 2003
1.03 posts per day
Posts: 8089
Points: 494,440
   
Its ok to do but you will need to make sure you add some checks to make sure they are not taking advantage of the situation.




_________________
The path of the righteous man is beset on all sides by the inequities of the selfish and the tyranny of evil men. Blessed is he, who in the name of charity and good will, shepherds the weak through the valley of darkness, for he is truly his brother's keeper and the finder of lost children. And I will strike down upon thee with great vengeance and furious anger those who would attempt to poison and destroy my brothers. And you will know my name is the Lord when I lay my vengeance upon thee. Ezekiel 25:17
Back to top Reply with quote
Display posts from previous:      
Add To: Del.icio.us  Digg  Google  Spurl  Blink  Furl  Y! MyWeb  
<< View previous topic View next topic >>
Post new topicReply to topic

Jump to 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum