The forum of the forums
Would you like to react to this message? Create an account in a few clicks or log in to continue.

is it possible to allow a cretain HTML tags in posts

4 posters

Go down

is it possible to allow a cretain HTML tags in posts Empty is it possible to allow a cretain HTML tags in posts

Post by Michael_vx Wed 24 Aug 2016 - 15:06

is it possible to allow a cretain HTML tags in posts
to use some of the HTML tags
and in same way protect forum from the hacking HTML Scripts etc
ts only a question for now
as i being asked few days a go
thanks
Hello
Michael_vx
Michael_vx
Forumember

Male Posts : 664
Reputation : 29
Language : Arabic and some English
Location : Egypt

Back to top Go down

is it possible to allow a cretain HTML tags in posts Empty Re: is it possible to allow a cretain HTML tags in posts

Post by Michael_vx Thu 25 Aug 2016 - 3:38

odd
Think
thought there should be a reply as the notfication say
Michael_vx
Michael_vx
Forumember

Male Posts : 664
Reputation : 29
Language : Arabic and some English
Location : Egypt

Back to top Go down

is it possible to allow a cretain HTML tags in posts Empty Re: is it possible to allow a cretain HTML tags in posts

Post by Pamoon Thu 25 Aug 2016 - 5:21

The only way they can "hack" your forum by using CSS, somewhat JS.
This is myway: go ACP > General > Messages and e-mails > Censoring > Word Censoring > Add new word:
If you want to keep <style> tag, then censore the display, all of CSS hack are likely to use display:none.
Code:
World: "display:" Replacement: "display;"
But i recommended you to censore the <style> tag, because if i use this code in the post, your forum still be "hacked" ' -'
Code:
<div class="ok></div>
<style>.ok {
    width: 100000px;
    height: 100000px;
    position: absolute;
    z-index: 99999999;
    top: 0;
    left: 0;
    background: #fff;
}
</style>
But <style> isnt enough, check this lel:
Code:
<div style="width:100000px;height: 100000px;position: absolute;z-index: 99999999;top:0;left:0;background:#fff;"></div>
So, you need to censore the style= too ' -' (change it to oppagangnamstyle=).
Edit: dont forget <script
Pamoon
Pamoon
Forumember

Posts : 28
Reputation : 10
Language : en.js

https://help.forumotion.com/

Back to top Go down

is it possible to allow a cretain HTML tags in posts Empty Re: is it possible to allow a cretain HTML tags in posts

Post by SLGray Thu 25 Aug 2016 - 6:05

@Pamoon the topic starter does not want to censor the tags.


is it possible to allow a cretain HTML tags in posts Slgray10

When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.
SLGray
SLGray
Administrator
Administrator

Male Posts : 51533
Reputation : 3519
Language : English
Location : United States

https://forumsclub.com/gc/128-link-directory/

Back to top Go down

is it possible to allow a cretain HTML tags in posts Empty Re: is it possible to allow a cretain HTML tags in posts

Post by Pamoon Thu 25 Aug 2016 - 8:03

yes @SLGray, censor the tags is the good way to allow a certain HTML tags in post Smile
for ex: you cant use <span></span> because of censoring
Pamoon
Pamoon
Forumember

Posts : 28
Reputation : 10
Language : en.js

https://help.forumotion.com/

Back to top Go down

is it possible to allow a cretain HTML tags in posts Empty Re: is it possible to allow a cretain HTML tags in posts

Post by Michael_vx Thu 25 Aug 2016 - 18:32

Pamoon wrote:The only way they can "hack" your forum by using CSS, somewhat JS.
This is myway: go ACP > General > Messages and e-mails > Censoring > Word Censoring > Add new word:
If you want to keep <style> tag, then censore the display, all of CSS hack are likely to use display:none.
Code:
World: "display:" Replacement: "display;"
But i recommended you to censore the <style> tag, because if i use this code in the post, your forum still be "hacked" ' -'
Code:
<div class="ok></div>
<style>.ok {
    width: 100000px;
    height: 100000px;
    position: absolute;
    z-index: 99999999;
    top: 0;
    left: 0;
    background: #fff;
}
</style>
But <style> isnt enough, check this lel:
Code:
<div style="width:100000px;height: 100000px;position: absolute;z-index: 99999999;top:0;left:0;background:#fff;"></div>
So, you need to censore the style= too ' -' (change it to oppagangnamstyle=).
Edit: dont forget <script

you mean something like bad words replaceing when i say bad become *** as i want
im not sure but this might not work
let me say the same qeustin with other way
now if i allow HTML in posts
that might allow hackers to hack the forum by some kind of HTML Scripts
i only need few HTML Tags like <div> and </div>
things like that i know it will be safe Tags
Michael_vx
Michael_vx
Forumember

Male Posts : 664
Reputation : 29
Language : Arabic and some English
Location : Egypt

Back to top Go down

is it possible to allow a cretain HTML tags in posts Empty Re: is it possible to allow a cretain HTML tags in posts

Post by Ace 1 Thu 25 Aug 2016 - 19:21

Just filter the word <script> and </script> and make them appear as " ".

And I don't think you need to filter the style tags.
Ace 1
Ace 1
Helper
Helper

Male Posts : 843
Reputation : 64
Language : English - French?
Location : Druid Hill Park

https://help.forumotion.com

Back to top Go down

is it possible to allow a cretain HTML tags in posts Empty Re: is it possible to allow a cretain HTML tags in posts

Post by Michael_vx Fri 26 Aug 2016 - 2:47

so same might work with iframe
this could do it i guess
if there a better way ill be waiting
if not the topic can be arked as solved
Michael_vx
Michael_vx
Forumember

Male Posts : 664
Reputation : 29
Language : Arabic and some English
Location : Egypt

Back to top Go down

is it possible to allow a cretain HTML tags in posts Empty Re: is it possible to allow a cretain HTML tags in posts

Post by SLGray Fri 26 Aug 2016 - 3:33

If you are worried about HTML then just not allow it.


is it possible to allow a cretain HTML tags in posts Slgray10

When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.
SLGray
SLGray
Administrator
Administrator

Male Posts : 51533
Reputation : 3519
Language : English
Location : United States

https://forumsclub.com/gc/128-link-directory/

Back to top Go down

is it possible to allow a cretain HTML tags in posts Empty Re: is it possible to allow a cretain HTML tags in posts

Post by Michael_vx Fri 26 Aug 2016 - 17:22

SLGray wrote:If you are worried about HTML then just not allow it.

dont worry
i gave the warning to the forum owner who asked me about that question
and the other told him about the risks but he still want to use HTML in posts
http://help.ahlamontada.com/t1085280-topic#4920246
this the reason for me to ask here
to see what trick will help to avoid hacking Scripts for him
Michael_vx
Michael_vx
Forumember

Male Posts : 664
Reputation : 29
Language : Arabic and some English
Location : Egypt

Back to top Go down

is it possible to allow a cretain HTML tags in posts Empty Re: is it possible to allow a cretain HTML tags in posts

Post by Michael_vx Sat 27 Aug 2016 - 4:05

what tag is most needed is <div> only
is there something can do the same job in bbcode ?
Michael_vx
Michael_vx
Forumember

Male Posts : 664
Reputation : 29
Language : Arabic and some English
Location : Egypt

Back to top Go down

is it possible to allow a cretain HTML tags in posts Empty Re: is it possible to allow a cretain HTML tags in posts

Post by Michael_vx Sat 27 Aug 2016 - 23:43

i apologize in the first place
this topic is ready for garbag or archive
i apologize again
Michael_vx
Michael_vx
Forumember

Male Posts : 664
Reputation : 29
Language : Arabic and some English
Location : Egypt

Back to top Go down

is it possible to allow a cretain HTML tags in posts Empty Re: is it possible to allow a cretain HTML tags in posts

Post by SLGray Sat 27 Aug 2016 - 23:55

Locked as Requested


is it possible to allow a cretain HTML tags in posts Slgray10

When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.
SLGray
SLGray
Administrator
Administrator

Male Posts : 51533
Reputation : 3519
Language : English
Location : United States

https://forumsclub.com/gc/128-link-directory/

Back to top Go down

Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum