Testing vbcode hole
 

<font color="red"><i onMouseOver="alert(document.location);">This piece of text could be dangerous if you were to move your mouse over it!</i> </font>

How did you guys plug this hole here? It gets parsed on my site.

What version do you run?

It's because on your site, you are posting as Admin, and HTML is probably enabled for Admins on your site. Here, you are a member, and HTML is switched off. It's not a vBCode hole.

You're right, that's what it was. I logged in under a regular account I have for testing and it showed up like it does here now. That must be one of the html security problems I hear about. Good thing I have it turned off for everyone but the Admin, huh? ;)

I guess I should have called it an html hole. Sorry about that.

Enabling HTML is VERY risky. :)

It's great having it available to the Admin though. It makes doing a lot of things easier. ;)

testing signature

wheres da shadow and glow tags gone :rolleyes:

I LIKE that sig. I need one like that. ;)

That is a top sig. :)

At 260k, it should be. ;)

!!!

Now I know why I don't allow [img] tags in my own forums for sigs! ;)

Same here, my friend, same here. ;)

hmm which sig? ^^

what about without the text is this ok ?

As long as it's within these rules:

[nosig][/nosig]

i not quite sure how big my siganture is
does this mean i get to keep it :o

Dimensions: 241 x 124 (OK)

Size: 250 kb (NOT ok)

Size needs to be less than 20 k.