Announcement

Collapse
No announcement yet.

should i turn HTML code off ??

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • should i turn HTML code off ??

    hello ...

    my friends said that i have to turn HTML code off cus they can hack the forum easly .... IS THAT RIGHT ???

    if yes , is there any solutions ???

    thanx

  • #2
    Please follow the instructions in my sig to register for vB support on these forums. Thanks.
    Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
    Change CKEditor Colors to Match Style (for 4.1.4 and above)

    Steve Machol Photography


    Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


    Comment


    • #3
      IM LOOKING for the answer to this same question.
      sigpic

      Comment


      • #4
        Admin CP -> Forums & Moderators -> Modify [edit] -> Allow HTML Code in posts -> No

        Repeat these steps for each forum.
        Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
        Change CKEditor Colors to Match Style (for 4.1.4 and above)

        Steve Machol Photography


        Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


        Comment


        • #5
          How can people hack the board using HTML? I can't figure how.

          Comment


          • #6
            Originally posted by JHS_Pichu
            How can people hack the board using HTML? I can't figure how.
            Sorry we're not going to give instructions on how to do this.
            Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
            Change CKEditor Colors to Match Style (for 4.1.4 and above)

            Steve Machol Photography


            Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


            Comment


            • #7
              Originally posted by JHS_Pichu
              How can people hack the board using HTML? I can't figure how.
              What the sig says

              Comment


              • #8
                Originally posted by <v>
                What the sig says
                Is that an automated reply or what?
                You're my Prince of Peace
                And I will live my life for You

                Comment


                • #9
                  should i turn HTML code off ??


                  This allows users to use HTML while posting. It is strongly recommended that you DO NOT turn this on as it can severely compromise security and/or severely mess up layout if users insert malformed HTML. Even if you set this to Yes, users still cannot use certain tags, including javascript: and about:.
                  Is it really that big of a security risk?
                  Last edited by Emarkay; Sun 30 Dec '07, 1:20am.

                  Comment


                  • #10
                    Yes it is.
                    Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
                    Change CKEditor Colors to Match Style (for 4.1.4 and above)

                    Steve Machol Photography


                    Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


                    Comment


                    • #11
                      HTML in posts is available for private communities consisting of trustworthy friends. If your forum is public, which most are, then ensure HTML is off.

                      Comment


                      • #12
                        Thanks for the help.

                        Comment


                        • #13
                          Is this still a security threat until now?

                          Thanks.

                          Comment


                          • #14
                            Yes, nothing has changed. It's still a security threat.
                            Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
                            Change CKEditor Colors to Match Style (for 4.1.4 and above)

                            Steve Machol Photography


                            Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


                            Comment

                            widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
                            Working...
                            X