YouTube BB Code? With Full URL?

[db90]

How can I use the BB Code to have people just put the full url within [youtube] tags? I currently have it set so they just need the youtube id, but I want it possible with the full url as well.

[Headliner?]

Why is this in the Design & Graphics forum?

[cheat-master30]

Possible security risk, but you'd change it from the default code to having the {param} sections where the full address is rather than replacing the id at the end.

[db90]

So the code would be:

<object width="425" height="350"><param name="movie" value="{param}"></param><embed src="{param}" type="application/x-shockwave-flash" width="425" height="350"></embed></object>

?

[Marco van Herwaarden]

As already mentioned in post #3, using the full URL can open secrity risks.

[sparklywater]

Use this mod, it allows posting of full YouTube url in the BB code:

https://vborg.vbsupport.ru/showthread.php?t=130868

--------------- Added [DATE]1219323589[/DATE] at [TIME]1219323589[/TIME] ---------------

Originally Posted by Marco van Herwaarden

As already mentioned in post #3, using the full URL can open secrity risks.

Can you please take a look at that mod and explain whether it poses any security risks.

[Marco van Herwaarden]

In general if you show the results of a bb-code inline, then you don't want the users to be able to provide the full URL. They could also place a (mallicious??) link to another site. The safest option is always to have the URL (semi) hardcoded and only allow the users to enter the parameters needed.