PDA

View Full Version : Signature showing HTML codes


kenng
04-29-2010, 02:40 AM
Hi all,
need help here..
after migration from 3.6.8 to 4.0.2 using impex 1.96, everything works except that the signatures will display the plain HTML codes. It is not phasing errors since if i redo the exact signature codes, preview and save, it will show up nicely.

The problem is... how can it be done to all existing users? (trying not to ask the users to redo their signatures manually again)

Pls enlighten me!

Thanks

Videx
04-30-2010, 02:58 AM
Because it's such a security risk, users are normally not allowed to post HTML in sigs or anywhere else. You can change that in permissions, but it's really not recommended. Presumably you're the admin, so when you do it, it works.

You could, in theory, go through the old db and translate all the HTML to bbcode, but that would be painful. Just forget it. Who really cares if old archived posts show unparsed html?

kenng
05-03-2010, 07:30 AM
Hi Videx,
thanks for replying. Yes allowing HTML sign is dangerous, but it has been like that since years ago and it would be 'unfriendly' to disable it altogether now.

What would be the best way to do it? How can I not show the signatures(for everyone) and encourage users to resubmit bbcode friendly signatures?

Thank you very much!

Videx
05-03-2010, 02:50 PM
I don't think you have to disable it; it already doesn't parse by default. I would just put up a sticky somewhere explaining things. When I occasionally see someone trying to include html, I PM them. If there aren't too many that refuse to do it themselves, I suppose you can always go in and change theirs to bbcode yourself.

kenng
05-04-2010, 12:39 AM
Lets just for the sake of knowledge, if management insist on allowing HTML parsing. How do I go about doing it? (since you mentioned it doesn't parse by default).

* new forums already has "HTML is on"

Thanks!

Videx
05-04-2010, 12:53 AM
I dunno. I think it's a combination of usergroup perms and forum perms. And I guess sig perms too.

FWIW, I witnessed personally the type of havoc this can cause just last week. My co-admin mistakenly left a closing center tag off a notice, and by the time I tracked it down the forum was in an uproar. I have no idea how I would have found it had it been in a sig somewhere.

kenng
05-04-2010, 01:05 AM
Ok got it.. its usergroup perms.

Thanks so much Videx!