Forum descriptions

Discussion of general topics related to the new version and its place in the world. Don't discuss new features, report bugs, ask for support, et cetera. Don't use this to spam for other boards or attack those boards!
Forum rules
Discussion of general topics related to the new release and its place in the world. Don't discuss new features, report bugs, ask for support, et cetera. Don't use this to spam for other boards or attack those boards!
DoD
Registered User
Posts: 360
Joined: Sat Aug 30, 2003 11:32 am

Re: Forum descriptions

Post by DoD »

Clericvash wrote:why not try the bbcode way?
because you can't ;)
User avatar
chAos
Registered User
Posts: 259
Joined: Wed Jan 16, 2002 7:05 am

Re: Forum descriptions

Post by chAos »

No, html doesn't need to be enabled. It should just work straight away. =\
User avatar
psoTFX
Registered User
Posts: 1984
Joined: Tue Jul 03, 2001 8:50 pm
Contact:

Re: Forum descriptions

Post by psoTFX »

erm, no, as I've explained I believe at least twice before ... data is run through specialchars to try and eliminate XSS issues. The ability to "add" HTML to various titles, etc. was never "intentional". It was an oversight that was left in place.
sparkster
Registered User
Posts: 182
Joined: Mon Jan 05, 2004 1:18 am

Re: Forum descriptions

Post by sparkster »

I guessed this was the case but surely it needn't apply in the ACP?
DoD
Registered User
Posts: 360
Joined: Sat Aug 30, 2003 11:32 am

Re: Forum descriptions

Post by DoD »

sparkster wrote:I guessed this was the case but surely it needn't apply in the ACP?
All _GET / _POST / _REQUEST vars are obtained through request_var() - which applies htmlspecialchars to the string.

It can take a small MOD on the user's part to replace the HTML versions of < and > with real ones for the forum descriptions.=, or by using get_html_translation_table()
Post Reply