PDA

View Full Version : How to let the POST's HTML Code goto DB Without being converted to BBCODE ?


shehabix
12-15-2009, 08:42 PM
Hi All Is there a way to fully allo the HTML code to goto DB without code modification ? ?

Notice: I know how to protect this Code from SQL Injections or XSS & Scripts ......etc . .

and if it's not possible . .does any one have a suggestion about BBCODE to Add Background Color To Text. .

E.g. If I Want to Highlight a Word In a User's Post Without changeing font's color is there a way to change its background color : (Like MS Word when you Highlight A Word) . . .

kh99
12-15-2009, 09:19 PM
Do you mean allow HTML tags in a post? I think there's an option for that in the Forum Manager. But I think maybe the issue isn't just putting it in the db, but that there's lot's of HTML a user could write that would mess up the page.

You can set background color by something like:

<span style="background-color:yellow">some text</span>


and while it might be tempting to make a bbcode that allows the color to be specified, I think if you do that there's nothing stopping a user from entering any style attributes (not just a color name), so they could do things like position something anywhere on the page.