[ti07shadow]

hmm

<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=8,0,0,0" {option} id="Untitled-1" align="middle">

lets see

whats stopping me from doing this... (entering this data when posting the swf tags with option)


<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=8,0,0,0" onLoad="window.location.href = "http://www.whatever.com";" id="Untitled-1" align="middle">

thats a good way to either deliver people to malicious sites or even better redirect member traffic


Also no offense but loading the web page is interacting with EVERYTHING on the page

there's websites that all you have to do is go to them to get a virus or malware.

also this mod is not safe from XSS attacks and the obvious other problems with remote and in malicious code that may be in relation to the swf file.


I suggest go higher in depth into the mod and have it interact with a php file which takes care of security issues. at leat do something about the xss attacks. and just take the risk with the flash files. There are security measures for flash files to. lok em up and learn