Is enabling HTML in forums where users can comment a security risk?
I have a WordPress and MyBB bridge and it has to have HTML otherwise it would stuff up.
Users and guests can comment, too - but they have to be moderated.
I believe it can, if someone posts a bad kind of HTML code, but I suggest using a HTML for usergroup's plugin, to limit which groups can use it. YOu can get one from MyBB Central but there may be one on the mods site.
Thanks, never thought of that actually.
<script> tags are automatically filtered out, but yes, it'd be better not to let everybody use it. You could break the layout or something with this:
<div style="width: 10000px; height: 10000px;></div>
never allow html for the known users/groups.
letting them post html can cause security risks as they can some codes to penetrate into your database, getting account informations and all.
(2010-12-22, 05:55 AM)Joshua Mayer Wrote: [ -> ]I believe it can, if someone posts a bad kind of HTML code, but I suggest using a HTML for usergroup's plugin, to limit which groups can use it. YOu can get one from MyBB Central but there may be one on the mods site.
There's a free one here that I've coded.