vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 2.x Full Releases (https://vborg.vbsupport.ru/forumdisplay.php?f=4)
-   -   HTML Always Enabled for Admins+Etc. (https://vborg.vbsupport.ru/showthread.php?t=32015)

Palmer ofShinra 11-01-2001 10:00 PM
This one is by request from here (http://vbulletin.org/forum/showthrea...&postid=197531), and really quite simple...

No matter what the forum rules say, Admins and Super Mods should always be able to post in HTML.

Tested on my board and works fine.

RobAC 11-02-2001 09:37 AM
I think this is an awesome idea and I've been wanting to see something like this for a long time. However, before I add it, I'd like to get ideas from the Admins. and Mods of this board.....what does this hack do for potential security threats to the board?? Anyone?

Mr. X 11-02-2001 02:51 PM
This hack is exactly what I was looking for. I was gonna request it yesterday too infact :)

But I too would like to know if there are any security issues. If not, Im definetly going to install it :)

Palmer ofShinra 11-02-2001 05:24 PM
Security Issues:

Withing the vB itself, none. They can't do anything that would screw up your database or swipe passwords or get admin access with HTML.

The security issues with HTML are in the code itself.

With it enabled, posters can use any tags, including JavaScript, where the real hazard is.

They can **** with the layout pretty bad... redefine colors on the fly using a <style tag to change the css...

They can add Flash movies and images, embed sound and movie files...

It comes down to how much you trust your mods.

Right now it's based off usergroups... and is set for Admins and Super Mods. You can add more usergroups or remove group 5 to restrict it to just admins.

I didn't add the code to determine if a user is a mod of a certain forum... because if they're just a single forum mod, would they need HTML posting rights? And just in that forum?

Mr. X 11-02-2001 07:42 PM
So as long as its with ppl you trust to have it (and I do trust my mods), there is no issue right? Just common sense? sounds good to me :)

cyrus 11-06-2001 11:18 AM
sweeeet

tried with 2.2.0, works 100% fine !

thanks !!!

FWC 11-18-2001 08:40 AM
Thanks, Palmer. This allows me to embed sound files in an occasional post. If I just make a custom vB code the users will get carried away. The high speed connection folks will embed massive files that take minutes for the dial-up people to download. At least that's what happened on my old board with HTML allowed. :)

Admin 11-18-2001 08:49 AM
Let's see...
<center>;)</center>

FWC 11-18-2001 09:01 AM
LOL!! I would say it worked.

FWC 11-18-2001 09:03 AM
Quote:
Originally posted by FireFly
Let's see...
<center>;)</center>
Let's see what happens when a regular user quotes it.

Very cool!

RobAC 11-18-2001 02:07 PM
I did notice one problem with this hack. When you try and add a table using html code, it inserts a TON of break tags and places the table all the way at the bottom of the post leaving a ton of clear space within the post.

LuBi 02-06-2002 05:37 PM
What would it take to get this to work with signatures also?

-=dm=- 02-09-2002 12:20 AM
Quote:
Originally posted by RobAC
I did notice one problem with this hack. When you try and add a table using html code, it inserts a TON of break tags and places the table all the way at the bottom of the post leaving a ton of clear space within the post.
any fix for this above, I have the same problem?

-=dm=- 02-11-2002 02:13 PM
anyone?

ZiRu$ 03-29-2002 04:03 AM
[QUOTE]Originally posted by LuBi
What would it take to get this to work with signatures also?

Destee 11-18-2002 02:16 AM
Palmer ofShinra ... Thanks for this. Clicking Installed.

Destee

BlueVoltage 02-21-2003 05:53 PM
I have an error:
Quote:
Parse error: parse error, unexpected T_CONSTANT_ENCAPSED_STRING in /home/zoanthid/public_html/forum/admin/functions.php on line 867

Fatal error: Call to undefined function: vbsetcookie() in /home/zoanthid/public_html/forum/admin/sessions.php on line 241
Here is the ONLY part I have modified in my admin/functions.php:

PHP Code:
    // do ip addresses
    if ($post[ip]!="") {
        if ($logip==2) {
            eval("\$post[iplogged] .= \"".gettemplate("postbit_ip_show")."\";");
        }
        if ($logip==1) {
            eval("\$post[iplogged] .= \"".gettemplate("postbit_ip_hidden")."\";");
        }
        if ($logip==0) {
            $post[iplogged]="";
        }
    } else {
        $post[iplogged]="";
    }
if ($post[usergroupid]==6 OR $post[usergroupid]==5) {
$post[message]=bbcodeparse2($post[pagetext],1,1,1,1);
} else {
$post[message]=bbcodeparse($post[pagetext],$forum[forumid],$post[allowsmilie]);
}

//highlight words for search engine

if (isset($highlight) && $highlight != '') {
        if ((isset($postid) and $postid==$post[postid]) or !isset($postid)) {
            reset($replacewords);
            while (list($key,$val)=each($replacewords)) {
            $post['message']=preg_replace("#(^| |\n|\r|\t|\]|>|\")(".$val.")(([\.,]+[ $\n\r\t])|$|\"|<|\[| |\n|\r|\t)#si", "\\1<highlight>\\2</highlight>\\3", $post['message']);
            }
        }
    }
    // do posts from ignored users
    if (($ignore[$post[userid]] and $post[userid] != 0)) {
        eval("\$retval = \"".gettemplate("postbit_ignore")."\";");
    } else {
        eval("\$retval = \"".gettemplate("postbit")."\";");
    }
    return $retval;
}

// ###################### Start gettextareawidth ####################### 
Please Help ASAP.

Ryan

BlueVoltage 02-21-2003 05:55 PM
Oh and i am running 2.3.0, no other hacks installed.

subu1 02-24-2003 05:13 PM
Hi,

Admins and Supermoderator can post in Html and only Moderator's???

Who can i do, please, Iam a Newbie

greetz subu1


All times are GMT. The time now is 05:02 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01101 seconds
  • Memory Usage 1,771KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_php_printable
  • (3)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (19)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 
Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete