vb.org Archive - [PHP] and [CODE] tags parsing

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- Member Archives (https://vborg.vbsupport.ru/forumdisplay.php?f=202)

- - [PHP] and [CODE] tags parsing (https://vborg.vbsupport.ru/showthread.php?t=39755)

Till	06-12-2002 01:55 PM

[PHP] and [CODE] tags parsing

Hi,

one of my staff members posted on vbulletin.com's support forums asking about why vB puts a space in certain code when displayed inside the code/php-vB-tags.

For example:

Code:

<a href="javascript:window.open(...);">Link</a>

Since they said it was put there by design (hehe, "It's not a bug, it's a feature!"), I was wondering if someone on here could explain how someone could possibly exploit that.

Never heard of anything like that.

Is there a hack to get the code parsed the more "correct" way?

Till

P.S.
If anyone is interested in the thread:
http://www.vbulletin.com/forum/showt...threadid=48055

Admin

06-12-2002 02:17 PM

This is by design, not a bug.

To remove this protection, open /admin/functions.php and delete this code:

Code:

"/javascript:/si",

(appears twice)
And also remove this code:

Code:

"java script:",

(appears twice as well)

Till	06-12-2002 04:36 PM

Quote:

Originally posted by FireFly
This is by design, not a bug.

To remove this protection, open /admin/functions.php and delete this code:

Code:

"/javascript:/si",

(appears twice)
And also remove this code:

Code:

"java script:",

(appears twice as well)

Thanks for your help. :)

All times are GMT. The time now is 10:09 AM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.00958 seconds Memory Usage 1,718KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (5)bbcode_code_printable (1)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (3)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: