[Tae-Hwan]

ok, i assure you, all i want to do.. is install velocd's custompage hack while maintaining the peace of mind that no one's going to destroy my site through it. in its current form, it does allow you to embed flash into the html code of a member's page, which is exactly why i want to know how much i can limit this to keep my server secure. deterrence through obscurity never works, which is why open-source products are more secure than microsoft products. i think it would be beneficial to the entire vbulletin.org community, if we knew the vulnerabilites in our software,.. so if anyone would be kind enough to tell me exactly how flash can be used to hack the server, i'd really appreciate it.