Use of < img src not working inside profile fields in 2.3.2?

[Freddie Bingham]

Oh yes it is acting different and it would help if I looked at user.php and not profilefield.php

This is what changed it: http://www.vbulletin.com/forum/showthread.php?t=69375

[Alien]

Okay I see what changed, but I don't recall anything occuring on my end that would need that update which completely removes something I came to depend on.. Hmm. So I guess I can no longer add html in those fields inside the admin cp anymore now or in the future without hacking the files now or using awards hacks correct?

[Freddie Bingham]

The real solution would be to add a another option when you edit a field that states 'Allow HTML in this field?'. Then we would know to run htmlspecialchars() or not on it. I can make this change for 3.0 but since I don't forsee any more 2.x releases, I really don't know what to tell you other than to upload the user.php from 2.3.0 if you want it back to the previous method. You'll have no issues reverting to that file.

[AJR]

I've got the same problem as well. It's all fine and dandy to convert it with htmlspecialchars... it prevents any malicious code from being entered into a field... but the vB team forgot to include the html decoding when showing $profilefield. An oversight, or whatever it was, I'd like to have the code to fix it as well.

Thanks

[Alien]

Hey,

Yeah that would be a great solution but I don't think freddie or anyone else is going to release the "Html allowed in this field?" code if there won't be an updated vB 2.x release unfortunately.

I guess I can revert to my 2.3.0 user.php if there isn't much there that was changed... It was probably something involving line 390 if I had to guess...

-Jason

[Ron DiPaola]

I ended up using the 2.3.0 user.php file as well. Please make this part of version 3.

-Ron