Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Modules
Author Message
arun4444
New Member
New Member



Joined: May 17, 2007
Posts: 12

PostPosted: Tue Jun 19, 2007 3:49 pm Reply with quote

I want to allow users to add the following tag in the reviews module:


Code:
<embed src="http://www.jumpcut.com/media/flash/jump.swf?id=94B515D20F1811DC8995000423CF385C&asset_type=movie&asset_id=94B515D20F1811DC8995000423CF385C&eb=1" width="408" height="324" type="application/x-shockwave-flash"></embed>


i am useing latest raven nuke distro
ty

arun[/code]
 
View user's profile Send private message
montego
Site Admin



Joined: Aug 29, 2004
Posts: 9457
Location: Arizona

PostPosted: Tue Jun 19, 2007 9:34 pm Reply with quote

Well, I would not recommend opening up the embed tag as it would be a haven for XSS attacks and more. But, if you want the risk, you can add the embed tag and attributes to the $allowableHTML array definition within config.php.

You might want to consider adding code instead that hardcodes the ability for some users (maybe those of a particular Group (see "Edit Groups" in the administration control panel).

_________________
Where Do YOU Stand?
HTML Newsletter::ShortLinks::Mailer::Downloads and more... 
View user's profile Send private message Visit poster's website
spurtus
Regular
Regular



Joined: May 13, 2006
Posts: 89

PostPosted: Sun Jul 01, 2007 2:02 pm Reply with quote

I have same issue. Sounds like a great "feature" upgrade opportunity for our poor non-coding types. Smile
 
View user's profile Send private message Yahoo Messenger
montego







PostPosted: Mon Jul 02, 2007 7:04 am Reply with quote

Amongst many others... Wink
 
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Modules

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©