How to safely allow embedded YouTube videos?

[Hummie]

How would I use a code like this to embed something hosted on my own webspace?

[Jake Bunce]

Here is a generic embed BB code:

http://www.vbulletin.com/forum/showthread.php?t=118681

[Hummie]

Here is a generic embed BB code:

http://www.vbulletin.com/forum/showthread.php?t=118681

Thanks...off to test it now...I appreciate the fast response. I am thinking if I am the only one to be able to upload to my own host, then this kind of BB code to my own host would be safer from hacks, right?

[peterska2]

It depends on exactly how you do it. If you are hosting the files on your own server then you can set the code to only require the filename to be entered by having the rest of the path included in the BBCode. This way if anyone does try to use another file then it will just break the string and not do anything.

For example: http://www.forumsforchrist.com/misc.php?do=bbcode

The replacement used for this is

<div align="center">
<OBJECT CLASSID="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" WIDTH="700"
HEIGHT="500" CODEBASE="http://www.apple.com/qtactivex/qtplugin.cab">
<PARAM name="SRC" VALUE="completed_movies/{param}">
<PARAM name="AUTOPLAY" VALUE="false">
<PARAM name="CONTROLLER" VALUE="true">
<EMBED SRC="completed_movies/{param}" WIDTH="700" HEIGHT="500" AUTOPLAY="false"
CONTROLLER="true"
LOOP="false"
href="completed_movies/{param}"
PLUGINSPAGE="http://www.apple.com/quicktime/download/">
</EMBED>
</OBJECT>
</div>

which only works with files located in the completed_movies directory on my server or directories located within it.

[Hummie]

Oh, thanks..I will look at that...hosting a chat right now and had to stop working on this.

I am wondering about type of file.

The .swf files seem smallest....is there a good code for them?

[Hummie]

well..that didn't work for me...I replaced your completed_videos with my folder name where mine are hosted....got all that right....I probably have the wrong format of movie for that code.

I've tried so many things and nothing works! Maybe a good night's sleep and I'll wake up and you all will have an answer for me

I appreciate all the help.

[peterska2]

The code I use is for QuickTime movies. Different formats will require different code to be used.

[Hummie]

Thanks for your help.

I could not get your code to work for me and the quick time files seem huge!

However, I did get the wmv code that is here to work. Does this code look secure to you.

[alhoori]

How can have dynamic size , can I give the use the choice of selecting the size ?

[Hummie]

I put it in the other forum, but I'll ask here too. The wmv code they gave, I got to work in IE, but not in firefox. Any suggestions?

[moddis]

is there anyway to do it without making a bbcode? Like just pasting the embed code from youtube into the post? Or making a bbcode that is private so others users cant use/see the code to be able to post youtube videos?

[Jake Bunce]

You would have to enable HTML to be able to directly paste the embed code. Enabling HTML is not recommended for security reasons.

BB codes in posts don't have group permissions so you can't restrict it like that.

[moddis]

Where do I enable html? I have seen in usergroup an option to enable it in signatures but i want it in posts and only for a certain usergroup...

[Jake Bunce]

HTML posting in normal posts (not sigs) can only be controlled at the forum level, not the group level:

Admin CP -> Forums & Moderators -> Forum Manager -> Edit Forum -> Allow HTML

[moddis]

Thanks. I noticed that if I enable it, there is no way to set who will actually be able to post html, so everyone will be able to ,right?