Announcement

Collapse
No announcement yet.

vbCode vs html code problem

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Wayne Luke
    replied
    If the image tag is dynamic they may be able to execute Javascript and their own php scripts on unsuspecting users.

    Leave a comment:


  • cditty
    replied
    Question....In the CP for this item, it says that it can prevent "malicious use of the tag". What kind of malicious use? Should I be worried?



    Originally posted by tubedogg
    The way the [img] tag works was changed and there is an additional option in the Admin CP as of 2.0.0 (possibly RC3, not sure). You need to make sure that "allow dynamic images" is turned on.

    Leave a comment:


  • cditty
    replied
    Figured as much. Maybe I'll request a hack so that the images can be pulled from the user's system if they want a custom one. Save my bandwidth while I can.



    Thanks again.

    Chris

    Leave a comment:


  • tubedogg
    replied
    You mean use a dynamic image for your avatar? Hmm...that would take a bit of hacking because it is now all avatars are pulled straight from the database.

    Leave a comment:


  • cditty
    replied
    That fixed it. Thanks for the quick response.

    Any suggestions on how to get this to work with the avatar.php3 script?

    Leave a comment:


  • tubedogg
    replied
    The way the [img] tag works was changed and there is an additional option in the Admin CP as of 2.0.0 (possibly RC3, not sure). You need to make sure that "allow dynamic images" is turned on.

    Leave a comment:


  • cditty
    started a topic vbCode vs html code problem

    vbCode vs html code problem

    Can anyone tell me what the difference is between the vbCode
    [ img ] tags and the html < img > tags when handled through VB?

    I have written a little php program that will display a custom image when called. It works fine when called from within the < img > tags. But not with the [ img ] tags.

    Example:
    - just shows the url.
    <img src="http://www.redhotsweeps.com/cditty/image.php?cditty"> works as expected.

    I hope this is clear. If not, I'll try and clear it up.

    Thanks

    Chris
widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
Working...
X