I'm kind of shocked beyond belief that the program comes defaulted "out of the box" to allow users to enter javascript. The full range of potential mischief seems to be allowed if HTML's turned on.
It's unbelievable. There are other security issues with this program, and I hope Rick can spend time shoring stuff up. UBBT has lots and lots and lots of features already.
Donate to UBBDev today to help aid in Operational, Server and Script Maintenance, and Development costs.
Please also see our parent organization VNC Web Services if you're in the need of a new UBB.threads Install or Upgrade, Site/Server Migrations, or Security and Coding Services.
