Quote:
Originally Posted by Drewish
Some kids were playing with the shoutbox on my forum. One of them gave one of those message boxes that never go away no matter how many times you press "ok." Another one redirected the whole site to lemonparty.org via. javascript. A final person was able to modify the entire main page to the contents of lemonparty.org. This is very insulting, and although I've pruned those users, and banned them from the forum/shoutbox, It would be nice to prevent something like that from happening again....
|
You need to find your vbshout.php file that you uploaded during installation. Once you do, find this line:
Code:
if ($_POST['do'] == 'shout')
{
$vbulletin->input->clean_array_gpc('p', array(
The next line should be changed to:
Code:
'shout' => TYPE_NOHTML,
Currently, 'shout' is set to something other than TYPE_NOHTML. I don't remember what, exactly, cuz its been awhile since I changed it :ermm: