Determined to make Flash BBCode work [It Worked!]

[robertmf]

[quote="Highway of Life"]
post an attachment of the picture you want displayed when you lock a topic. (MOD's ONLY)

But... the topic is still open.
[/quote]

This is mine (if you still want image for locked topic)

[robertmf]

In the UCP uploading a new avatar that is larger than the permitted size causes phpbb3 to bring up the hourglass and hang at the hourglass rather than a graceful error message telling the user that the image is too large.

[robertmf]

Stock: [b][i][u]

[code][list][list=][img][url][flash][size=]

Added: [hr][hr=]
CSS allowed ONLY in the HR tag.
Example: [hr=width: 50%; height: 4px;]

I don't understand the [flash] BBcode symbol. Is the flash reader embedded into phpbb3 and the [flash] presents the **whatever** as a flash page/image ? ... or do you have to have the $flash$ authoring software to make up/upload your flash BBcode ?

[ElbertF]

Your hr-BBcode isn't safe for vandalism (check in FireFox)

[hr=width: 0px; height: 9px;":a62a9]

[Highway of Life]

Ouch!! you are right.
But that's what we have 's and Admins for, and what Ban's and Warnings are for.

On the other hand, do you have an idea on how to prevent that sort of thing?

[ElbertF]

BBcode is there to prevent such things. In 2.0.x allowing a simple img tag would mean you could even open popup windows and so, with the onload attribute. Simply don't give people the freedom of using attributes.

[Highway of Life]

[quote="spambot":41dff]
BBcode is there to prevent such things. In 2.0.x allowing a simple img tag would mean you could even open popup windows and so, with the onload attribute. Simply don't give people the freedom of using attributes.
[/quote:41dff]
Well, they are limited to the style attribute, which is okay with me. Even if a person chooses a height of 9,999pixels, that's okay.
There is also a way of limiting the code by:
1) Only allow the style attribute, and perhaps certain others. But the style attribute gives the user more options.
2) Allowing only certain styles in the style attribute
3) setting a Max-width, max-height for people like YOU!

[ElbertF]

And how would you do that

Click here, you'll see there's even worse things I can do.

SHS` had some nice ideas too.. http://www.phpbb.com/bugs/viewreport.php?b=1982

[robertmf]

You seem to know a bit about the BBcode, have you noticed anything about BBcode u/l case

NNO-Stephen
... also with those of us using lowercase b instead of uppercase B, I don't believe the bbcode parser is case sensitive, which is why you're having problems. that's why you can type in B and b as the bold bbcode, and both regardless of any custom bbcode.

[ElbertF]

Nothing strange about that, BBcode is case-insensitive so [b] is the the same as [B]. It's stored in lower case though.

Code: Select all

[b]test[/b]
[B]test[/b]
[B]test[/B]

test
test
test