PHP in BBCODE

[Karthick]

What the?

You still haven't explained to me how its a security risk..!!!!

[Karthick]

BtW, I already coded it in manually

[Zachery]

Originally Posted by Karthick

BtW, I already coded it in manually

Yes, we have if you can run a snippet of code in this bbcode and it will recgonize it, anything and i mean ANYTHING could be done to your forum

[Karthick]

That means you didn't read my posts properly.

What I wanted to do was execute MY PHP CODE in the bbcode. E.g

<?

$test = "{param}";

?>

Now if there is a flaw in that, then PHP is one big flaw.

[Zachery]

Originally Posted by Karthick

That means you didn't read my posts properly.

What I wanted to do was execute MY PHP CODE in the bbcode. E.g

<?

$test = "{param}";

?>

Now if there is a flaw in that, then PHP is one big flaw.

<?

$test = "{param}";

?>
when {param} =

test"; bla bla more bad php code ";

[Karthick]

OMG.... vBulletin and PHP escape all harmful characters...

E.G GET $test (im bla"h) = im bla\"h after escaping.....

*bangs head on brick wall*

[Zachery]

Originally Posted by Karthick

OMG.... vBulletin and PHP escape all harmful characters...

E.G GET $test (im bla"h) = im bla\"h after escaping.....

*bangs head on brick wall*

since its php use stripslashes

[Karthick]

[Zachery]

PHP Code:

removed :) 


whats your forum url now?


im sure i can make it work with some trys

[Karthick]

<a href="http://www.chesskit.com/community/" target="_blank">http://www.chesskit.com/community/</a>

Good Luck