#enable_html
new version <b>1.3</b>: <a href="http://boardmod.yabbforum.com/yabb/attachments/enable_html_13_sp11.mod">enable_html_13_sp11.mod</a>

Here is a small mod for ya: Enable HTML

<table align="center" width="95%" cellspacing="0" cellpadding="0" border="0"><tr height="35"><td width="13" width="13"><img src="../box1a.gif" width="13" height="35" border="0"></td><td valign="top" background="../box1b.gif"><table align="left" cellspacing="0" cellpadding="0" border="0"><tr><td valign="bottom" width="100%" height="21"><font face="tahoma" color="#00007F" size="2"><nobr><img src="http://boardmod.yabbforum.com/yabb/YaBBImages/wink.gif" alt=""> <b>Enable HTML</b><font size="1"> :: 03/09/02 24:44 :: Michael Prager</font></nobr></font></td></tr></table></td><td width="14"><img src="../box1c.gif" width="14" height="35" border="0"></td></tr><tr><td background="../box2a.gif"> </td><td bgcolor="#96652B"><font face="Arial" color="#FFFFFF" size="2"><b>ID: </b>Enable HTML SP1.1

<b>Version: </b>1.3 SP1.1

<b>Mod info: </b>This mod allows you to define certain grounds and users which are allowed to use HTML in their posts.
To set the permission, goto Admin Center -> "Forum Preferences and Settings" and set the group- and/or userlist.
Please concern that allowing HTML is a serious security risk! Only allow to reliable persons.

In this mod, HTML is disabled per default. When someone has permission to use HTML, he will have an additional checkbox when posting messages where he can enable HTML.
Note that when HTML is enabled in a post, UBBC will be disabled for it to prevent conflicts (for example with auto-url).

This mod is for SP1.1

Version history:
v1.3:
- added checkbox in post form, so you no longer have to add #<!--//-->enable_html yourself
- added html support for IMs
- added missing html support user's recent posts
- fixed html support in recent posts
v1.2:
- added html to recent posts, user's recent posts, search, printpage and topic summary
v1.1:
- fixed security issue. When someone modifies a post which contains HTML then the user must have HTML access too or HTML will be disabled on that post.
- fixed HTML in post preview
</font></td><td background="../box2c.gif"> </td></tr><tr><td background="../box3a.gif"><img src="../box3a.gif" width="13" height="14" border="0"></td><td background="../box3b.gif"><img src="../box3b.gif" width="9" height="14" border="0"></td><td background="../box3c.gif"><img src="../box3c.gif" width="14" height="14" border="0"></td></tr></table>

Here is a little screenshot of the new checkbox feature:
<img src="http://boardmod.yabbforum.com/yabb/attachments/enable_html.gif">

Please report any bugs you find. Thx

does it tell users what to do to add html??  or is it kinda if u know use it?

I have a question concerning this.

This shoudnt be an issue, really, as you shouldnt have moderators you dont trust, but what if a moderator modifies your post? Can he then change the HTML and save it?

hm that's true... never thought of that

We'd need to add a check which tests if the person who modified it is the original author and if not, disable html.

Hm that would make the mod dependent from this here.

since you don't have html rights, every html stuff you post will be parsed, for a good reason. Just think of what would happen when someone quotes you and modifies the quoted html. That would for example enable him to add javascript which reads out all the cookie from the users who view this page and send it to his own pc. That way he could gain all the usernames and passwords from the users!

The risk is too high, that's why moderators won't be allowed to use HTML when they modify something.

If you want your moderators to be able to post html too, then you have to give them the rights todo so first.

Security should ALWAYS come first!

Quote:


No, no, you misunderstood
It won't be dependent on this mod, because it just adds to this mod's access list If this mod isn't installed, nothing will happen(and this WILL be documented)

hey Michael, have you updated on this forum or can I just edit your and Daves posts now (unless I'm added though)

Is there a way to see if you can write HTML?