Testing vbcode hole

[Boofo]

<font color="red"><i onMouseOver="alert(document.location);">This piece of text could be dangerous if you were to move your mouse over it!</i> </font>

[Boofo]

How did you guys plug this hole here? It gets parsed on my site.

[Erwin]

What version do you run?

[Erwin]

It's because on your site, you are posting as Admin, and HTML is probably enabled for Admins on your site. Here, you are a member, and HTML is switched off. It's not a vBCode hole.

[Boofo]

You're right, that's what it was. I logged in under a regular account I have for testing and it showed up like it does here now. That must be one of the html security problems I hear about. Good thing I have it turned off for everyone but the Admin, huh? ;)

I guess I should have called it an html hole. Sorry about that.

[Erwin]

Enabling HTML is VERY risky. :)

[Boofo]

Today at 05:28 AM Erwin said this in Post #6 (https://vborg.vbsupport.ru/showthread.php?postid=367298#post367298)
Enabling HTML is VERY risky. :)

It's great having it available to the Admin though. It makes doing a lot of things easier. ;)

[msimplay]

testing signature

[msimplay]

wheres da shadow and glow tags gone :rolleyes:

[Boofo]

I LIKE that sig. I need one like that. ;)

[Erwin]

That is a top sig. :)

[Boofo]

At 260k, it should be. ;)

[Erwin]

!!!

Now I know why I don't allow [img] tags in my own forums for sigs! ;)

[Boofo]

Same here, my friend, same here. ;)

[Xenon]

hmm which sig? ^^

[msimplay]

what about without the text is this ok ?

[Erwin]

As long as it's within these rules:

[msimplay]

i not quite sure how big my siganture is
does this mean i get to keep it :o

[Erwin]

Dimensions: 241 x 124 (OK)

Size: 250 kb (NOT ok)

Size needs to be less than 20 k.