Testing vbcode hole
 

<font color="red"><i onMouseOver="alert(document.location);">This piece of text could be dangerous if you were to move your mouse over it!</i> </font>

How did you guys plug this hole here? It gets parsed on my site.

What version do you run?

It's because on your site, you are posting as Admin, and HTML is probably enabled for Admins on your site. Here, you are a member, and HTML is switched off. It's not a vBCode hole.

You're right, that's what it was. I logged in under a regular account I have for testing and it showed up like it does here now. That must be one of the html security problems I hear about. Good thing I have it turned off for everyone but the Admin, huh? ;)

I guess I should have called it an html hole. Sorry about that.

Enabling HTML is VERY risky. :)

It's great having it available to the Admin though. It makes doing a lot of things easier. ;)

testing signature

wheres da shadow and glow tags gone :rolleyes:

I LIKE that sig. I need one like that. ;)