BB Code inside of BB Code

[thegunowner149]

Is there built in protection against using bbcode inside bbcode option code (ie [foo=[bar]text[/bar]]) ? If not, would you guys know how to add it?

My members figured out how to do some pretty interesting stuff today...

http://forums.livingwithstyle.com/sh...30#post1605230

[Jake Bunce]

foo><[/b]]bar

Apparently it works. The bold tag is parsing in the link.

I can't think of any exploits for this off the top of my head. The HTML from the vB code is inserted, but any parameters are parsed for HTML characters.

[thegunowner149]

Any idea how to stop this? As you can see in the link to my site, it can have detrimental effects.

Thanks.

[Jake Bunce]

Any idea how to stop this?

You can modify the parsing code in the includes/functions_bbcodeparse.php file. That is the only way to change this behavior.