The forum of the forums
Welcome to the Official Support Forum of Forumotion!

To take full advantage of everything offered by our forum, please log in if you are already a member, or join our community if you've not yet.



Create a free forum like this one.

is it possible to allow a cretain HTML tags in posts

View previous topic View next topic Go down

is it possible to allow a cretain HTML tags in posts

Post by Michael_vx on August 24th 2016, 3:06 pm

is it possible to allow a cretain HTML tags in posts
to use some of the HTML tags
and in same way protect forum from the hacking HTML Scripts etc
ts only a question for now
as i being asked few days a go
thanks
Hello

Michael_vx
Forumember

Male Posts : 659
Reputation : 29
Language : Arabic and some English
Location : Egypt

Back to top Go down

Re: is it possible to allow a cretain HTML tags in posts

Post by Michael_vx on August 25th 2016, 3:38 am

odd
Think
thought there should be a reply as the notfication say

Michael_vx
Forumember

Male Posts : 659
Reputation : 29
Language : Arabic and some English
Location : Egypt

Back to top Go down

Re: is it possible to allow a cretain HTML tags in posts

Post by Pamoon on August 25th 2016, 5:21 am

The only way they can "hack" your forum by using CSS, somewhat JS.
This is myway: go ACP > General > Messages and e-mails > Censoring > Word Censoring > Add new word:
If you want to keep <style> tag, then censore the display, all of CSS hack are likely to use display:none.
Code:
World: "display:" Replacement: "display;"
But i recommended you to censore the <style> tag, because if i use this code in the post, your forum still be "hacked" ' -'
Code:
<div class="ok></div>
<style>.ok {
    width: 100000px;
    height: 100000px;
    position: absolute;
    z-index: 99999999;
    top: 0;
    left: 0;
    background: #fff;
}
</style>
But <style> isnt enough, check this lel:
Code:
<div style="width:100000px;height: 100000px;position: absolute;z-index: 99999999;top:0;left:0;background:#fff;"></div>
So, you need to censore the style= too ' -' (change it to oppagangnamstyle=).
Edit: dont forget <script

Pamoon
Forumember

Posts : 25
Reputation : 10
Language : en.js

http://animoe.twilight-mania.com/

Back to top Go down

Re: is it possible to allow a cretain HTML tags in posts

Post by SLGray on August 25th 2016, 6:05 am

@Pamoon the topic starter does not want to censor the tags.


When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.


SLGray
Administrator
Administrator

Male Posts : 36639
Reputation : 2441
Language : English
Location : United States

http://ztwds.forumotion.com/

Back to top Go down

Re: is it possible to allow a cretain HTML tags in posts

Post by Pamoon on August 25th 2016, 8:03 am

yes @SLGray, censor the tags is the good way to allow a certain HTML tags in post Smile
for ex: you cant use <span></span> because of censoring

Pamoon
Forumember

Posts : 25
Reputation : 10
Language : en.js

http://animoe.twilight-mania.com/

Back to top Go down

Re: is it possible to allow a cretain HTML tags in posts

Post by Michael_vx on August 25th 2016, 6:32 pm

@Pamoon wrote:The only way they can "hack" your forum by using CSS, somewhat JS.
This is myway: go ACP > General > Messages and e-mails > Censoring > Word Censoring > Add new word:
If you want to keep <style> tag, then censore the display, all of CSS hack are likely to use display:none.
Code:
World: "display:" Replacement: "display;"
But i recommended you to censore the <style> tag, because if i use this code in the post, your forum still be "hacked" ' -'
Code:
<div class="ok></div>
<style>.ok {
    width: 100000px;
    height: 100000px;
    position: absolute;
    z-index: 99999999;
    top: 0;
    left: 0;
    background: #fff;
}
</style>
But <style> isnt enough, check this lel:
Code:
<div style="width:100000px;height: 100000px;position: absolute;z-index: 99999999;top:0;left:0;background:#fff;"></div>
So, you need to censore the style= too ' -' (change it to oppagangnamstyle=).
Edit: dont forget <script

you mean something like bad words replaceing when i say bad become *** as i want
im not sure but this might not work
let me say the same qeustin with other way
now if i allow HTML in posts
that might allow hackers to hack the forum by some kind of HTML Scripts
i only need few HTML Tags like <div> and </div>
things like that i know it will be safe Tags

Michael_vx
Forumember

Male Posts : 659
Reputation : 29
Language : Arabic and some English
Location : Egypt

Back to top Go down

Re: is it possible to allow a cretain HTML tags in posts

Post by Ace 1 on August 25th 2016, 7:21 pm

Just filter the word <script> and </script> and make them appear as " ".

And I don't think you need to filter the style tags.

Ace 1
Helper
Helper

Male Posts : 767
Reputation : 51
Language : English - French?
Location : Druid Hill Park

http://help.forumotion.com

Back to top Go down

Re: is it possible to allow a cretain HTML tags in posts

Post by Michael_vx on August 26th 2016, 2:47 am

so same might work with iframe
this could do it i guess
if there a better way ill be waiting
if not the topic can be arked as solved

Michael_vx
Forumember

Male Posts : 659
Reputation : 29
Language : Arabic and some English
Location : Egypt

Back to top Go down

Re: is it possible to allow a cretain HTML tags in posts

Post by SLGray on August 26th 2016, 3:33 am

If you are worried about HTML then just not allow it.


When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.


SLGray
Administrator
Administrator

Male Posts : 36639
Reputation : 2441
Language : English
Location : United States

http://ztwds.forumotion.com/

Back to top Go down

Re: is it possible to allow a cretain HTML tags in posts

Post by Michael_vx on August 26th 2016, 5:22 pm

@SLGray wrote:If you are worried about HTML then just not allow it.

dont worry
i gave the warning to the forum owner who asked me about that question
and the other told him about the risks but he still want to use HTML in posts
http://help.ahlamontada.com/t1085280-topic#4920246
this the reason for me to ask here
to see what trick will help to avoid hacking Scripts for him

Michael_vx
Forumember

Male Posts : 659
Reputation : 29
Language : Arabic and some English
Location : Egypt

Back to top Go down

Re: is it possible to allow a cretain HTML tags in posts

Post by Michael_vx on August 27th 2016, 4:05 am

what tag is most needed is <div> only
is there something can do the same job in bbcode ?

Michael_vx
Forumember

Male Posts : 659
Reputation : 29
Language : Arabic and some English
Location : Egypt

Back to top Go down

Re: is it possible to allow a cretain HTML tags in posts

Post by Michael_vx on August 27th 2016, 11:43 pm

i apologize in the first place
this topic is ready for garbag or archive
i apologize again

Michael_vx
Forumember

Male Posts : 659
Reputation : 29
Language : Arabic and some English
Location : Egypt

Back to top Go down

Re: is it possible to allow a cretain HTML tags in posts

Post by SLGray on August 27th 2016, 11:55 pm

Locked as Requested


When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.


SLGray
Administrator
Administrator

Male Posts : 36639
Reputation : 2441
Language : English
Location : United States

http://ztwds.forumotion.com/

Back to top Go down

View previous topic View next topic Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum