HTML Code

[FmGrowit]

HTML Code in posts

This allows users to use HTML while posting. It is strongly recommended that you DO NOT turn this on as it can severely compromise security and/or severely mess up layout if users insert malformed HTML. Even if you set this to Yes, users still cannot use certain tags, including javascript: and about:.

Does anyone have an opinion about this? I'd like to enable HTML codes, but I'm concerned about this warning from vBulletin. It seems to me there should be software to prevent problems using HTML.

 

[SmokesAhoy]

it is nice to be able to use html codes, but to be true the dummy codes in forums work for 90% of the things you'd want to do.

you could always enable it and if it ever becomes a problem just disable it.

but, no real reason to use it if it is a concern, vbcode is pretty complete.

 

[deluxestogie]

I agree that HTML should not be enabled. Saves a lot of headaches.

Bob

 

[FmGrowit]

HTML is enabled (for now). I'm looking into a conversion program to make it safer to use. In the event HTML has to be disabled, in some cases you can do a screen capture, save it as a .jpeg file in "paint" and post it as an image. This only works if the entire file exists within the screen parameters though.

 

[CoralReefs]

I know this thread is long dead....

HOW IN THE HECK COULD HTML POSE A SECURITY RISK?!?!?!?!?!

HTML = "Hypertext MARK UP Language". It is a glorified set of instructions on how big to make your fonts and such.

IF javascript was part of the package- I would be a little more concerned.

Unless there is a way to do something funky like forward to a CGI script or something but I do not think you can do that with plain HTML- (I think you need something more powerful like Javascript).

 

[deluxestogie]

It's possible to embed evil things into a page using HTML. An example:

<img src="http://evilstogie.com/scripts/destroyFTTForum.php">

Here, the HTML image tag is used to execute php code loaded from a remote machine. The [ img ] pseudo-tag is filtered to prevent this.

Bob

 

[CoralReefs]

hmmmmm.....

Interesting.....