[drumsy]

03-18-03 at 10:19 AM drumsy said this in Post #148
I've encountered a very nasty problem that a member discovered, and exploited. It allows a member to post any image whatsoever on the forumhome (in our case it was a highly disturbing one) and I would like to know how to fix it. If someone can help me with a fix, I will share the code with you. I've disabled thread preview in the meantime.

Thanks to N!ck for the support and the solution. The following is the fix for this bug as related by N!ck via PM:

In forumdisplay.php, find:

    $fppreview=preg_replace("/\[[^\]]*\]/","",$fppreview); 
    $fppreview=str_replace("\"","",$fppreview);

and add this after it:

    $fppreview=str_replace("<","&lt;",$fppreview);
    $fppreview=str_replace(">","&gt;",$fppreview);

Again, thanks to N!ck for this support!