[html] tags not working for everyone.

  • This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies.
  • The alluring Olivia makes her debut on the Katbox After Dark (Mature audiences only) Click here!
  • Venture into the beautiful, mad world of The Sprawl! Look into it's darkness and the horror deep within! (Mature audiences only) Click here!
  • Katbox.net uses Project Wonderful ads to pay its server costs and artists can have their own PW ads to let them draw comics for a living. We humbly ask that you whitelist Katbox.net in adblock to support us. Thank you.
  • The Katbox developer Patreon helps us grow as a site! Show your support and earn special forum badges, or access the private subforum where we personally answer your questions or chat about whatever you want! http://www.patreon.com/Katbox
  • Don't miss an update, Guest! Follow us on twitter at @Katbox_Comics to stay in the loop!
  • Come chat with your favorite Katbox artists and fellow community members on our Discord server!

SoulKat

Katbox Forum Member
Apr 17, 2007
243
427
#1
I need some help, guys.

In order to have donation buttons in the Bazaar, we need use of the html tag. This allows us to use
Code:
<a href...>
to create the donation buttons in the forum. Whenever I edit posts that contain html tags, it works just fine. But if the Katbox artists edit the post, all of the html tags vanish instantly.

1. It happens to all of the artists, but not me. This made me think it was a permission error.
2. I have the option checked to allow simple html usage, including
Code:
<b>, <i>, <img> <a href>
etc... And I have told MSF to allow the html tag.
3. When I go under permissions and permissions by membergroups, there is no mention of what tags are and aren't allowed. Only the above option mentions it and it is in the forum's configuration, aside from permissions.

This means that I either need to find out what is going on or I need a new way to display the Paypal buttons. Let me know if you come up with anything. This is important. Currently the Katbox artists can't update the bazaar without my help. And I'm swamped right now.
 

Modan

Katbox Forum Member
Jun 2, 2009
204
0
29
#2
Have you tried logging into their accounts and editing the posts?

And have asked Wolfie yet? I'm sure he'll be the one to solve it anyway. :gleeAngel:
 

Sussoloc

Moderator
Apr 21, 2008
1,460
6
31
United Kingdom
sussoloc.deviantart.com
Personal Text
Wish you were here?
#3
I've been doing a bit of testing, and here's what I could find...

<a href="http://sussoloc.deviantart.com"><img src="http://i19.photobucket.com/albums/b167/Sussoloc/DJSullyUB.png" /></a>

I seem to be able to use HTML tags okay. However, I've tried posting one of the static image links from the Katbox Bazaar, and this is what appears:

<a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=freelancemanga@hotmail.com&item_name=FigurineProject&no_shipping=1&currency_code=USD&tax=0"><img src="http://cblue.katbox.net/images/FigurineProject.jpg" type="image""]/></a>

I assume that this is what happens when any of the Katbox artists update the post. However, I found that when I got rid of the type="image"" section of coding...

<a href="https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=freelancemanga@hotmail.com&item_name=FigurineProject&no_shipping=1&currency_code=USD&tax=0"><img src="http://cblue.katbox.net/images/FigurineProject.jpg" /></a>

:musicSully:

I also tried this with one of the dynamic images (e.g. the BB Team buttons), but it doesn't work for those. At the moment, it seems I can only offer half of a solution to your problem. Still, I hope this helps.
 
M

mrkelly22

#4
Letting users add actual HTML into their posts? That's a little frightening due to the huge security vulnerabilities it opens up.

I did a quick Internet search for you and found someone else with the same problem. The response was: "the html tag will only work for admins as a security feature for smf. There is no way to enable it for none admins, as it would pose a possible security risk to your forums."

So apparently SMF is smart enough to limit this potentially dangerous feature. However, I found a mod for SMF that allows you to enable HTML usage on a per-user basis. That way you can open up HTML usage for your artists without having to make them admins.
 

Sussoloc

Moderator
Apr 21, 2008
1,460
6
31
United Kingdom
sussoloc.deviantart.com
Personal Text
Wish you were here?
#5
I did a quick Internet search for you and found someone else with the same problem. The response was: "the html tag will only work for admins as a security feature for smf. There is no way to enable it for none admins, as it would pose a possible security risk to your forums."

So apparently SMF is smart enough to limit this potentially dangerous feature.
Hmm... that's strange, considering I seem to be able to use that feature without any problems.

I've posted two images that have been linked to websites using the HTML tag. One is my "Disc Jockey" userbox, which I've programmed to lead to my DeviantArt page, and the other is one of the donation pictures from the Katbox Bazaar which links to a PayPal payment gateway (the HTML coding was not modified in any way, except by removing the type="image"" section of coding).

Can anyone else see the pictures or access their links in my previous post? If so, it looks like I may have come across a considerable security flaw. :dropSully:
 

SoulKat

Katbox Forum Member
Apr 17, 2007
243
427
#6
Either way, the mod did its job. Now Avencri and Ron can edit the Bazaar post because I've enabled the permission for the Katbox Comic Artists membergroup with that mod.

Thank you so much, Mr. Kelly. Now I'm going to see if I can turn off HTML for the rest of the forum.