UseBB Community

The official board for UseBB help and discussion

UseBB Community » 2.x Discussion » no IMG tag allowed

no IMG tag allowed

Page: 1

Author Post
Member
Registered: May 2006
Posts: 16
you shouldn't allow images from external servers for security reasons due to possible CSRF attacks. most forum administarators doesn't realize the danger, so i think it shouldn't be allowed by default.
_______________
Member
Registered: Apr 2006
Posts: 53
Location: Athens, Greece
It's sometimes hard for commnities to run without images at all. It's a default for every forum software to support images in posts. But if you want to remove it, open sources/functions.php and remove this line:


// [img]image[/img]
"#\[img\]([\w]+?://[\w\#\$%&~/\.\-;:=,\?@\[\]\+\'!\(\)]*?)\[/img\]#is" => '<img src="" alt="'.$lang['UserPostedImage'].'" />


If you remove this, the [ img ][ /img ] tags won't be parsed.. ;)
Developer
Registered: Apr 2004
Posts: 2191
Location: Belgium
As for UseBB 2.0 a setting to disable IMG tags per forum could be an idea.
Member
Registered: May 2006
Posts: 16
@NextStep, i see your point. it should be configurable anyway just like Dietrich says. what's more it could be great feature to have possibility to choose tags you want to be parsed, or even easily plug-in own parser
_______________
Member
Registered: Apr 2006
Posts: 53
Location: Athens, Greece
That would be nice, but as I have said in the past this is far beyond the boundaries of a 'simple' bulletin board system.. ;)

Maybe with an ACP plugin would be better of course.
Developer
Registered: Apr 2004
Posts: 2191
Location: Belgium
Administration and configuration possibilities have less to do with a light/simple forum package. Disabling certain BBCode tags can in fact be handy to keep the forum clean and light.

So this might probably be a feature for 2.0.

Page: 1

UseBB Community » 2.x Discussion » no IMG tag allowed

UseBB Community is powered by UseBB 1 Forum Software