Users cannot save html code for embedding, only admin can

emmanova · February 13, 2011, 10:57:40 PM

Powered by SMF 2.0 RC4 | SMF © 2006–2010, Simple Machines LLC
SimplePortal 2.3.3 © 2008-2010, SimplePortal

My members started complaining that their embedded coding wasn't working, but every time I go and check their thread I see they didn't put the html code at the begining and the end of the embedded code. So I will go ahead and fix it for them adding the code. Next time they Modify their own thread it get mess up again, when I check is missing the html code.

I started to make fun of them telling them that they need to stop removing the html code or that their browser was mess up, becuase when I added the code it work fine. Well I had to slap in my face. I created a test account and is true when a regular user type a code like this

<iframe width="425" height="350" frameborder="0" scrolling="no" marginheight="0" marginwidth="0" src="http://maps.google.com/maps?f=q&source=s_q&hl=en&geocode=&q=Orlando,+FL&aq=0&sll=28.555043,-81.281652&sspn=0.015907,0.027144&ie=UTF8&hq=&hnear=Orlando,+Orange,+Florida&z=12&ll=28.538336,-81.379236&output=embed"></iframe><br /><small><a href="http://maps.google.com/maps?f=q&source=embed&hl=en&geocode=&q=Orlando,+FL&aq=0&sll=28.555043,-81.281652&sspn=0.015907,0.027144&ie=UTF8&hq=&hnear=Orlando,+Orange,+Florida&z=12&ll=28.538336,-81.379236" style="color:#0000FF;text-align:left">View Larger Map</a></small>

and type html at the begining and end, I can't even preview it, it doesnt show the embedded map. If I save it and go back to modify it, the html code is gone. But If I do it as administrator it stays. I search and research for permission and I can't find anything that can trigger this. Can anyone help?

emmanova · February 13, 2011, 10:58:55 PM

HA! Funny, I just try it here and it happen the same thing. I think I found a Bug

Antechinus · February 13, 2011, 11:02:33 PM

It's deliberate. Only admins can use html.

Arantor · February 14, 2011, 04:51:55 AM

It's done for security, too - if a regular user had that power, they could embed all kinds of nastiness in the forum (like attempts as login stealing details, for example)

emmanova · February 14, 2011, 09:34:43 AM

Can't that be an option like everything else? Let the admin decide what kind of permission to give to users? or better yet how about fix the embeddind then so they dont have to use html.

Like if I go to Vbulleting forums and paste the code I just did here the map show up and I dont have to worry about using html or anything.

So can I have a solution?

Arantor · February 14, 2011, 09:36:49 AM

QuoteCan't that be an option like everything else? Let the admin decide what kind of permission to give to users? or better yet how about fix the embeddind then so they dont have to use html.

No, it can't.

Do you have any embedding mods (I'm thinking either Aeva or SAVE here) installed?

QuoteLike if I go to Vbulleting forums and paste the code I just did here the map show up and I dont have to worry about using html or anything.

Yes, and if you go to vBulletin forums and pull the same stunt, it's a mess waiting to happen, since iframes can trivially provide security weaknesses if improperly set up... you show me a forum that can embed iframes, and more often than not I can show you how to hijack the logged in user's credentials.

emmanova · February 14, 2011, 10:01:56 AM

So I guess you are telling me the only way is using a third party addon?

Yes I have Aeva installed. Just was wondering why this was happening and if there were something or setting that I was missing.

Arantor · February 14, 2011, 10:04:05 AM

QuoteSo I guess you are telling me the only way is using a third party addon?

Yes, for security reasons.

QuoteYes I have Aeva installed.

Version? Is Google Maps enabled in the sitelist?

emmanova · February 14, 2011, 05:19:28 PM

Yes is enabled, i just need to play more w the settings I guess. cause sometimes using the link instead of the html (at leas on map) won't give you the same options. For example when I use html, it copy the map and a link at the bottom that says Vie Larger but when I use the link with Aeva it shows the map smaller and not way to click on the map to see the full view :/

Arantor · February 14, 2011, 05:53:06 PM

I guess the version of Aeva shouldn't matter since they all use the same sitelist, but I figured I'd ask anyway...

emmanova · February 14, 2011, 05:56:23 PM

Quote from: Arantor on February 14, 2011, 05:53:06 PM
I guess the version of Aeva shouldn't matter since they all use the same sitelist, but I figured I'd ask anyway...

Ok well I do thank you for your time and explanation and your interest on my case

News:

Users cannot save html code for embedding, only admin can