Get your forum today!

Izayoi Hime · 09-30-2004, 08:41 PM

I only allow Admin group to post HTML, but why when I tested it with member nick, HTML still works, though not fully, but it works partially!!! I don't want it to work at all for those I don't allow to use HTML. How to do that ??

Isolice · 09-30-2004, 08:46 PM

What do you mean by 'works partially'? How can it only work a bit? Give us an example please.

Izayoi Hime · 09-30-2004, 10:00 PM

For example:

_ when I put HTML in, it came out as I expected it to be.
_ when I tested with a member nick, the HTML still came out (although members aren't allowed to post HTML), like this:

<TABLE>
<TR>
<TD>1</TD>
<TD>2</TD>
</TR>
</TABLE>

=======> result: 12 ; it didn't show a TABLE as I wanted, but it didn't show the whole code either, which makes me think that part of the HTML must have worked. MOREOVER, when I used a member nick to post music, I can hear the music although I didn't see the Media Player as I did with Admin nick. Those incidents make me conclude that HTML still works for members.

Izayoi Hime · 10-02-2004, 01:52 PM

bump !

PS: Do you understand what I meant ??

Isolice · 10-02-2004, 03:09 PM

Ok. Do you mean that when members use the [dohtml] tag, the HTML code shows up but doesn't execute? For instance, what happens when a member uses 'Bold' inside [dohtml] tags?

Izayoi Hime · 10-02-2004, 09:56 PM

Several examples:

When member typed: <font color="red">abc</font>
it came out: abc (black color, as usual)

When member typed the script for music ,
music was played, but the Media Player can't be seen.

The whole script for a webpage was typed in ---> it showed up like the webpage (but not ALL HTML were executed), not a code source.

Isolice · 10-02-2004, 10:01 PM

I believe this must be an IPB error, then. Sorry, but I don't think you'll be able to fix this. It seems as though members' use of HTML will be very perimative, though.

Izayoi Hime · 10-02-2004, 10:34 PM

So... should I allow HTML ? Right now, I just allow the Admin group, but members still can post it... Should I disable it all ?

Isolice · 10-02-2004, 10:35 PM

I think you should just disable it all together. After all, how often would you use it? It's up to you, though.

Izayoi Hime · 10-03-2004, 06:58 AM

I'm just afraid that someone might use it to hack the board.

Isolice · 10-03-2004, 08:13 AM

Yea, there is an open possibility of messing up your board in one way or another by allowing HTML use. I reccommend that you just disable it, plain and simple. Has your question been answered?

09-30-2004, 08:41 PM	#1 (permalink)
Izayoi Hime Junior Forumer Join Date: Aug 2004 Posts: 228 Rep Power: 4 fTrader: (0) fBuck$: 348 Bank: 0 Total fBuck$: 348 Send fBuck$ » My Forumer My Country:	I only allow Admin group to post HTML, but why when I tested it with member nick, HTML still works, though not fully, but it works partially!!! I don't want it to work at all for those I don't allow to use HTML. How to do that ??
	++ Welcome to our World! ++ If you know Tennyo, you know me

09-30-2004, 10:00 PM	#3 (permalink)
Izayoi Hime Junior Forumer Join Date: Aug 2004 Posts: 228 Rep Power: 4 fTrader: (0) fBuck$: 348 Bank: 0 Total fBuck$: 348 Send fBuck$ » My Forumer My Country:	For example: _ when I put HTML in, it came out as I expected it to be. _ when I tested with a member nick, the HTML still came out (although members aren't allowed to post HTML), like this: <TABLE> <TR> <TD>1</TD> <TD>2</TD> </TR> </TABLE> =======> result: 12 ; it didn't show a TABLE as I wanted, but it didn't show the whole code either, which makes me think that part of the HTML must have worked. MOREOVER, when I used a member nick to post music, I can hear the music although I didn't see the Media Player as I did with Admin nick. Those incidents make me conclude that HTML still works for members.
	++ Welcome to our World! ++ If you know Tennyo, you know me

10-02-2004, 01:52 PM	#4 (permalink)
Izayoi Hime Junior Forumer Join Date: Aug 2004 Posts: 228 Rep Power: 4 fTrader: (0) fBuck$: 348 Bank: 0 Total fBuck$: 348 Send fBuck$ » My Forumer My Country:	bump ! PS: Do you understand what I meant ??
	++ Welcome to our World! ++ If you know Tennyo, you know me

10-02-2004, 09:56 PM	#6 (permalink)
Izayoi Hime Junior Forumer Join Date: Aug 2004 Posts: 228 Rep Power: 4 fTrader: (0) fBuck$: 348 Bank: 0 Total fBuck$: 348 Send fBuck$ » My Forumer My Country:	Several examples: When member typed: <font color="red">abc</font> it came out: abc (black color, as usual) When member typed the script for music , music was played, but the Media Player can't be seen. The whole script for a webpage was typed in ---> it showed up like the webpage (but not ALL HTML were executed), not a code source.
	++ Welcome to our World! ++ If you know Tennyo, you know me

10-02-2004, 10:34 PM	#8 (permalink)
Izayoi Hime Junior Forumer Join Date: Aug 2004 Posts: 228 Rep Power: 4 fTrader: (0) fBuck$: 348 Bank: 0 Total fBuck$: 348 Send fBuck$ » My Forumer My Country:	So... should I allow HTML ? Right now, I just allow the Admin group, but members still can post it... Should I disable it all ?
	++ Welcome to our World! ++ If you know Tennyo, you know me

Get your forum today!

Explore

Support

About

09-30-2004, 08:46 PM	#2 (permalink)
Isolice Elite Forumer Join Date: Mar 2004 Posts: 6,048 Rep Power: 11 fTrader: (4) fBuck$: 3,412 Bank: 55,373 Total fBuck$: 58,785 Send fBuck$ » My Forumer My Country:	What do you mean by 'works partially'? How can it only work a bit? Give us an example please.

10-02-2004, 03:09 PM	#5 (permalink)
Isolice Elite Forumer Join Date: Mar 2004 Posts: 6,048 Rep Power: 11 fTrader: (4) fBuck$: 3,412 Bank: 55,373 Total fBuck$: 58,785 Send fBuck$ » My Forumer My Country:	Ok. Do you mean that when members use the [dohtml] tag, the HTML code shows up but doesn't execute? For instance, what happens when a member uses 'Bold' inside [dohtml] tags?

10-02-2004, 10:01 PM	#7 (permalink)
Isolice Elite Forumer Join Date: Mar 2004 Posts: 6,048 Rep Power: 11 fTrader: (4) fBuck$: 3,412 Bank: 55,373 Total fBuck$: 58,785 Send fBuck$ » My Forumer My Country:	I believe this must be an IPB error, then. Sorry, but I don't think you'll be able to fix this. It seems as though members' use of HTML will be very perimative, though.

10-02-2004, 10:35 PM	#9 (permalink)
Isolice Elite Forumer Join Date: Mar 2004 Posts: 6,048 Rep Power: 11 fTrader: (4) fBuck$: 3,412 Bank: 55,373 Total fBuck$: 58,785 Send fBuck$ » My Forumer My Country:	I think you should just disable it all together. After all, how often would you use it? It's up to you, though.

10-03-2004, 06:58 AM	#10 (permalink)
Izayoi Hime Junior Forumer Join Date: Aug 2004 Posts: 228 Rep Power: 4 fTrader: (0) fBuck$: 348 Bank: 0 Total fBuck$: 348 Send fBuck$ » My Forumer My Country:	I'm just afraid that someone might use it to hack the board.
	++ Welcome to our World! ++ If you know Tennyo, you know me

10-03-2004, 08:13 AM	#11 (permalink)
Isolice Elite Forumer Join Date: Mar 2004 Posts: 6,048 Rep Power: 11 fTrader: (4) fBuck$: 3,412 Bank: 55,373 Total fBuck$: 58,785 Send fBuck$ » My Forumer My Country:	Yea, there is an open possibility of messing up your board in one way or another by allowing HTML use. I reccommend that you just disable it, plain and simple. Has your question been answered?

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode