[Beta] Enable HTML!!

[Ma§t£r Öf Ŧçh£m¥]

This mod is a simple 3 step mod that took me 5 minutes to do.... I know there can be improvements made but I'm not a php expert....

Warning!!!

This mod can and will add security risks, so only install this mod if you are willing to take the risk.

Otherwise good luck and enjoy!!
Get it here

[Spaceman-Spiff]

why make a mod to un-secure your own board?

[Ma§t£r Öf Ŧçh£m¥]

Because there have been a lot of requests for this mod which all of the actuall mod writers blow off because it's a security hazard, and the people who keep requesting it don't really care...they just want to enable html. So in a sense I'm just showing everyone that just because you might not want it it is easy enought to do (it took me 5 min) so why not make the mod? Like I said "don't install it if you don't want to add more security isuses but if you want html enabled then go ahead and install it........

[Roundboy]

I think a good way to approach this mod is to only allow certian html code, instead of allowing all and selectivly blocking.

What more could people want besides images, links, and text formatting?

[Ma§t£r Öf Ŧçh£m¥]

actually you can limit what people can use by adding certian tags to the censor list and leaving it blank after "="

[joker]

Is it for 1.4.x or elder versions, too?

[Ma§t£r Öf Ŧçh£m¥]

I'm pretty sure... I don't think that the coding has changed that much.....

[GauGau]

actually you can limit what people can use by adding certian tags to the censor list and leaving it blank after "="

so you censor e.g. "<object": the user inputs "<object foo=bar>bla" => the posting will look like this " foo=bar>bla". Is this your solution? The only thing this will give you is a lot of editing user's postings...

There have been discussions on enabling html before, I suggest you just post a link to your html-enabled board here and we'll show you (just as a demonstration) what can be done . It's just an invitation for wannabe-hackers...

GauGau

[mephisto_kur]

I won't load the mod, but thanks for making it!  Many people here don't understand that some people that run their own boards don't *care* about the security risk.  You did good.  You posted the mod, gave a security warning.  Everyone else just needs to back off and not run the mod on their own boards.

[elvensage]

Well, since we enabled the HTML we only had one*edit* that decided to get on the forum and mess with it.  Although we're going to disable all teh table tags.  That's the only thing that really messed anything up.

[Ma§t£r Öf Ŧçh£m¥]

It has been brought to my attention that after editing a post containing html it only showed the code...... this however is now fixed  

[theACEMAN640]

that would be me!

anyway...the HTML has to be possible in a safe way. Ikonboard and Invision have it that i know of.

and correct me if I'm wrong...is Proboards a copy of YaBB Gold? Soory I'm off topic here...but i think they have HTML enabled.

[Spaceman-Spiff]

try using this: http://www.php.net/manual/en/function.strip-tags.php
if u want to enable and disable some properties too, it might need ereg i guess...

[Matt Siegman]

Actual mod writers ignore it because it is INCREDIBLY insecure.  With a specially crafted link, you can get almost any info you need.  With a special link in YaBBC, you can still get it, its just a LOT harder.

Because there have been a lot of requests for this mod which all of the actuall mod writers blow off because it's a security hazard, and the people who keep requesting it don't really care...they just want to enable html. So in a sense I'm just showing everyone that just because you might not want it it is easy enought to do (it took me 5 min) so why not make the mod? Like I said "don't install it if you don't want to add more security isuses but if you want html enabled then go ahead and install it........

[Matt Siegman]

If someone doesn't *care* about security, they shouldn't be running a BBS.  You have to care, or you will get hacked, even with the most secure software.

I won't load the mod, but thanks for making it!  Many people here don't understand that some people that run their own boards don't *care* about the security risk.  You did good.  You posted the mod, gave a security warning.  Everyone else just needs to back off and not run the mod on their own boards.