This is not safe at all allowing all bbcodes to be used in the subject. people can just link their website instead of the subject or maybe deploy a html code that will redirect the entire forums to something else. Their needs to be a way to just limiting colors, italics, bold or underline and nothing else.
I say this should really be in beta instead of full releases until this is solved IMO.
Its a really good hack idea but security does comes first to forums that would really want to use this.
|