|
|
Joined: Jan 2002
Posts: 77
Member
|
|
Member
Joined: Jan 2002
Posts: 77 |
I have 6.2.0 and was wondering how to turn html on in peoples signatures.
hlp plz
|
|
|
|
|
Joined: Jan 2000
Posts: 5,073
Admin Emeritus
|
|
Admin Emeritus
Joined: Jan 2000
Posts: 5,073 |
UBB.classic: Love it or hate it, it was mine.
|
|
|
|
|
Joined: Jan 2002
Posts: 77
Member
|
|
Member
Joined: Jan 2002
Posts: 77 |
|
|
|
|
|
Joined: Jan 2000
Posts: 5,073
Admin Emeritus
|
|
Admin Emeritus
Joined: Jan 2000
Posts: 5,073 |
HTML can open a potential security risk. It is off by default on purpose.
UBB.classic: Love it or hate it, it was mine.
|
|
|
|
|
Joined: Mar 2000
Posts: 3,594
Moderator / Template Diva
|
|
Moderator / Template Diva
Joined: Mar 2000
Posts: 3,594 |
I don't know exactly, but here's my guess:
Even when HTML is enabled in forums, UBB still strips out certain potentially harmful tags, thus keeping your sorry butt from being hacked to crap by a little script kiddie.
But, for sigs, ALL HTML is stripped by one quick little routine. There's no use for the stripping of certain tags, since it's all stripped anyway. So the selective censor thing isn't there. If you disable the one little routine, ALL HTML is allowed - even the harmful stuff. So, your site will be hacked to crap by a little script kiddie.
Yeah, a long long time ago i was on a HTML In Sigs kick too. Then my site got hacked because of it. Jamin grew out of that kick pretty fast, lemme tell ya!
---Jamin
Don't put that signature in your mouth! You don't know where it's been!
|
|
|
|
|
Joined: Feb 2000
Posts: 4,625
Member
|
|
Member
Joined: Feb 2000
Posts: 4,625 |
I did that crap once too. But I learned the risks and I added filters. Then I got an iframe in sig problem and flashing and scrolling bull. So I made the popular tags UBBCode tags..
|
|
|
|
|
Joined: Mar 2000
Posts: 32
Member
|
|
Member
Joined: Mar 2000
Posts: 32 |
So I guess if we want to allow one or two long-term posters the privilege we should manually add the code to their user files?
|
|
|
|
|
Joined: Jun 2001
Posts: 2,849
Spotlight Winner
|
|
Spotlight Winner
Joined: Jun 2001
Posts: 2,849 |
quote:
Originally posted by Charles Capps:
Don't.
Trust Charles on this one.
|
|
|
|
|
Joined: Mar 2001
Posts: 7,394
Admin / Code Breaker
|
|
Admin / Code Breaker
Joined: Mar 2001
Posts: 7,394 |
quote:
Originally posted by Puff the Magic Jamin:
I don't know exactly, but here's my guess:
Even when HTML is enabled in forums, UBB still strips out certain potentially harmful tags, thus keeping your sorry butt from being hacked to crap by a little script kiddie.
But, for sigs, ALL HTML is stripped by one quick little routine. There's no use for the stripping of certain tags, since it's all stripped anyway. So the selective censor thing isn't there. If you disable the one little routine, ALL HTML is allowed - even the harmful stuff. So, your site will be hacked to crap by a little script kiddie.
Yeah, a long long time ago i was on a HTML In Sigs kick too. Then my site got hacked because of it. Jamin grew out of that kick pretty fast, lemme tell ya!
---Jamin
You can add these filters in 1 line, but it's almost impossible to block everything. Even when HTML is on in forums (not signatures), you can get hacked, and easily.
The only thing to do if you want your board to be secure is to turn HTML off and add new UBB Codes of the things you use HTML for.
|
|
|
Donate to UBBDev today to help aid in Operational, Server and Script Maintenance, and Development costs.
Please also see our parent organization VNC Web Services if you're in the need of a new UBB.threads Install or Upgrade, Site/Server Migrations, or Security and Coding Services.
|
|
|
Posts: 69
Joined: January 2001
|
|
|
Forums63
Topics37,575
Posts293,931
Members13,824
| |
Most Online6,139
Sep 21st, 2024
|
|
Currently Online
Topics Created
Posts Made
Users Online
Birthdays
|
|
|
|
