Codezwiz >> Forums >> General PHP Nuke Help >> HTML allowed in forum profiles?

Register

Sorry if this has been answered, I've searched but no luck yet so posting for help

There are a few fields in the forum profile that I would like to allow some basic HTML. How can I change it so that only certain (or all if I have to) allows some html. Right now if you enter HTML is displays the code as text.

Does it have anything to do with this part of the code in usercp_register.php :

$music = stripslashes($music);

You could remove this:

htmlspecialchars()

I figured there would be security risks by removing it. I wont do it that way, is there any other way to allow basic HTML?

I have added a lot of extra fields to the profiles on my site. A lot of them I would like my users to be able to add images or edit their text using html. But if the only way of doing that creates security issues, I wont do it

Thanks for the help

Its ok to do but you will need to make sure you add some checks to make sure they are not taking advantage of the situation.