The Arcive of vBulletin Modifications Site.

Testing vbcode hole · **Released**: 03-16-2003

<font color="red"><i onMouseOver="alert(document.location);">This piece of text could be dangerous if you were to move your mouse over it!</i> </font>

Boofo · #2 03-16-2003, 08:21 AM

How did you guys plug this hole here? It gets parsed on my site.

Erwin · #3 03-16-2003, 09:04 AM

What version do you run?

Erwin · #4 03-16-2003, 09:10 AM

It's because on your site, you are posting as Admin, and HTML is probably enabled for Admins on your site. Here, you are a member, and HTML is switched off. It's not a vBCode hole.

Boofo · #5 03-16-2003, 09:19 AM

You're right, that's what it was. I logged in under a regular account I have for testing and it showed up like it does here now. That must be one of the html security problems I hear about. Good thing I have it turned off for everyone but the Admin, huh?

I guess I should have called it an html hole. Sorry about that.

Erwin · #6 03-16-2003, 09:28 AM

Enabling HTML is VERY risky.

Boofo · #7 03-16-2003, 09:29 AM

Quote:

Today at 05:28 AM Erwin said this in Post #6
Enabling HTML is VERY risky.

It's great having it available to the Admin though. It makes doing a lot of things easier.

msimplay · #8 03-16-2003, 10:34 PM

testing signature

msimplay · #9 03-16-2003, 10:34 PM

wheres da shadow and glow tags gone

Boofo · #10 03-16-2003, 10:42 PM

I LIKE that sig. I need one like that.