FMCodes • All-in-one Webmasters community
Would you like to react to this message? Create an account in a few clicks or log in to continue.

You are not connected. Please login or register

FMCodes • All-in-one Webmasters community  » Miscellaneous » Suggestions & Feedbacks » Refused Suggestions » HTML Vulnerability

HTML Vulnerability

+3
Niko
Sir Chivas
тнє ๖ۣۜSнυғғ׆ϵя ツ
7 posters
HTML Vulnerability Empty
тнє ๖ۣۜSнυғғ׆ϵя ツ
  • I'm a new member


    Community veteran
    You belong to this community since its ancient time
    Forum member
    Belongs to the community of FMCodes
      Posts : 3
      Points : 89959
    Hey staff or admin I suggest that the HTML Should be deactivated for Security issues.

    The problem is that anyone can put a full HTML page in a thread, and it will work.

    If you guys are being ignorant watch this.


    http://www.fmcodes.com/t577-the-html-vulnerability#3231

    HTML Vulnerability Empty
    Sir Chivas


    • Community veteran
      You belong to this community since its ancient time
      Passioned user
      You have participated in 50+ different topics, a true fan!
      Forumotion expert
      This user is an expert with Forumotion free forum hosting
      10th Anniversary (Grand Re-open)
      Thanks for being part of our grand re-opening
      Active Contributor
      The user has wrote more than 100 posts and comments
        Posts : 113
        Points : 92565
      Notice

      Hello, hola

      I will pass this up to the Administrators, for further discussions and notice.

      Also, for the future, please refrain creating multiple identical topics.



      HTML Vulnerability Empty
      Niko
      • Forum Administrator

        Team contributor
        You have been part of the community team
        Community veteran
        You belong to this community since its ancient time
        Active Contributor
        The user has wrote more than 100 posts and comments
        Passioned user
        You have participated in 50+ different topics, a true fan!
        Post lover
        You have liked more than 50 posts!
        Beta Tester
        You have been part of the Beta-Testing team
        Forumotion expert
        This user is an expert with Forumotion free forum hosting
        10th Anniversary (Grand Re-open)
        Thanks for being part of our grand re-opening
        Merry Christmas 2022
        Thanks for having been with us during Christmas season!
        Forum Writer
        You have opened more than 20 topics on the forum
        The Life of the Party
        You have made more than 20 members in our community, wow!
        Members Guru
        You have received more than 50 likes on your posts. Our members really what you have to say!
          Posts : 3613
          Points : 127132
        Hello,

        1st. Moved to suggestion forum
        2nd. Well, No one has already posted an html code... We will see



        HTML Vulnerability Empty
        LGforum
        • Veteran team member

          Community veteran
          You belong to this community since its ancient time
          Forumotion expert
          This user is an expert with Forumotion free forum hosting
          Team contributor
          You have been part of the community team
          Very active poster
          The user has wrote more than 75 posts
          Climbing user
          You have participated in 20+ different topics, keep it up!
            Posts : 77
            Points : 90612
          Really HTML is enabled? Oh dear.

          I believe script tags are stripped out of the posts, so there are no script issues.
          But here are some things that aren't stripped and would cause issues:
          Code:

          <div style="position:fixed;top:0px;left:0px;background:#000;width:100%;height:10000px;text-align:center;padding-top:100px">HTML issue, tut tut.</div>

          OR
          Code:
          <style>body { display: none }</style>

          Or I wonder if Iframes work?
          Oh my god they do... so thats the script issue brought back immediately. You should disable HTML... or I'll start demonstrating live, the potential issues. nonIo

          HTML Vulnerability Empty
          LGforum
          • Veteran team member

            Community veteran
            You belong to this community since its ancient time
            Forumotion expert
            This user is an expert with Forumotion free forum hosting
            Team contributor
            You have been part of the community team
            Very active poster
            The user has wrote more than 75 posts
            Climbing user
            You have participated in 20+ different topics, keep it up!
              Posts : 77
              Points : 90612
            I notice HTML is still enabled.
            This is a big issue that you need to sort. Luckily most browsers have security systems in place to prevent such things, but most still don't.

            HTML Vulnerability Empty
            Anonymous
            • Guest

                We'll try to disable it. But we have to change every single tutorial and Information topic. nonIo

                HTML Vulnerability Empty
                Niko
                • Forum Administrator

                  Team contributor
                  You have been part of the community team
                  Community veteran
                  You belong to this community since its ancient time
                  Active Contributor
                  The user has wrote more than 100 posts and comments
                  Passioned user
                  You have participated in 50+ different topics, a true fan!
                  Post lover
                  You have liked more than 50 posts!
                  Beta Tester
                  You have been part of the Beta-Testing team
                  Forumotion expert
                  This user is an expert with Forumotion free forum hosting
                  10th Anniversary (Grand Re-open)
                  Thanks for being part of our grand re-opening
                  Merry Christmas 2022
                  Thanks for having been with us during Christmas season!
                  Forum Writer
                  You have opened more than 20 topics on the forum
                  The Life of the Party
                  You have made more than 20 members in our community, wow!
                  Members Guru
                  You have received more than 50 likes on your posts. Our members really what you have to say!
                    Posts : 3613
                    Points : 127132
                  Mathias wrote:We'll try to disable it. But we have to change every single tutorial and Information topic. nonIo
                  As Mathias said... Our topics works on html: If we uneable it, we are a terrible forum ;(



                  HTML Vulnerability Empty
                  LGforum
                  • Veteran team member

                    Community veteran
                    You belong to this community since its ancient time
                    Forumotion expert
                    This user is an expert with Forumotion free forum hosting
                    Team contributor
                    You have been part of the community team
                    Very active poster
                    The user has wrote more than 75 posts
                    Climbing user
                    You have participated in 20+ different topics, keep it up!
                      Posts : 77
                      Points : 90612
                    nono What a bad idea.



                    You'll see your last post in this topic is hidden. Its hidden with css within this post. One major flaw. Thats just an example.

                    HTML Vulnerability Empty
                    Nathan
                    • Veteran team member

                      Community veteran
                      You belong to this community since its ancient time
                      Active Contributor
                      The user has wrote more than 100 posts and comments
                      Friendly user
                      You have added many community members as friends!
                      Passioned user
                      You have participated in 50+ different topics, a true fan!
                      Team contributor
                      You have been part of the community team
                        Posts : 108
                        Points : 89304
                      very bad idea i think users using some intermediate scripts will risk our view with some great and powerfull scripts

                      HTML Vulnerability Empty
                      Nathan
                      • Veteran team member

                        Community veteran
                        You belong to this community since its ancient time
                        Active Contributor
                        The user has wrote more than 100 posts and comments
                        Friendly user
                        You have added many community members as friends!
                        Passioned user
                        You have participated in 50+ different topics, a true fan!
                        Team contributor
                        You have been part of the community team
                          Posts : 108
                          Points : 89304
                        about that i think i have suggestion for this forum on here
                        It's a teamwork! We need a temwork!
                        first i think all staff members need to generate all the html to bb codes and the members
                        so then i-lgforum-chris-dans and other staff members reposting the original BBcode
                        third
                        All request from members and topics edit is on some PM so Luky pm shouldn't be inactive
                        Fourth change all the codes of this forum prefectly with bbcodes
                        and then all of users must doesn't use html and only staff are able to use it okay?
                        :birra: Great idea? yes read :B): yuppi yuppi Music excited yesyes togheter :<3: ??? redred leggiprima

                        HTML Vulnerability Empty
                        Ryan


                        • Community veteran
                          You belong to this community since its ancient time
                          Forum member
                          Belongs to the community of FMCodes
                            Posts : 30
                            Points : 89668

                          HTML Vulnerability Empty
                          Nathan
                          • Veteran team member

                            Community veteran
                            You belong to this community since its ancient time
                            Active Contributor
                            The user has wrote more than 100 posts and comments
                            Friendly user
                            You have added many community members as friends!
                            Passioned user
                            You have participated in 50+ different topics, a true fan!
                            Team contributor
                            You have been part of the community team
                              Posts : 108
                              Points : 89304
                            Ryan wrote:
                            ow don't post an iframe dude

                            HTML Vulnerability Empty
                            Hancki
                            • I'm a new member


                              Community veteran
                              You belong to this community since its ancient time
                              Forum member
                              Belongs to the community of FMCodes
                                Posts : 1
                                Points : 76656
                              This could be a real problem! :/
                              Don't allow HTML, it can be a problem!

                              Topic Actions

                              Sponsored




                              FMCodes • All-in-one Webmasters community  » Miscellaneous » Suggestions & Feedbacks » Refused Suggestions » HTML Vulnerability

                              ©phpBB | Contact | Report an abuse