I have a new photography forum in which members need to post links from their FineArtAmerica accounts. Admins can use tag, but members cannot. How is this adjusted? Any help would be appreciated. I realize doing this is regarded as security risk (not sure what specific risks though). But not being able to change this would require my using other software.
- Greg
A link can be perfectly posted without HTML
You have choices. You can use the img tag for linking images directly, you can use the url bbcode for linking to it. I'm not sure what you actually need beyond that.
As for 'security risk', the risk of using raw HTML is that your account could be taken over.
Hopefully I can post an example link. Every image on FineArtAmerica has an image link in the bottom corner for members to post in blogs and on FAA discussion boards. It works perfectly on Blogger sites, for example. I haven't found a way to make it work with our board.
If there's an alternate suggestion how to accomplish this, I'm all ears. Since it works on Blogger and FAA and they remain secure, it should be safely possible for our forum. Thanks again for any suggestions.
<a href='http://greg-norrell.artistwebsites.com/featured/lower-falls-from-red-rock-point-greg-norrell.html' size='20'><img src='http://greg-norrell.artistwebsites.com/displayartworkartistwebsites.html?id=2191443&width=249&height=166' alt='Art Prints' title='Art Prints' style='border: none;'></a>
That got butchered...
Maybe place it into the code tags so the link isn't so destroyed?
[url=http://greg-norrell.artistwebsites.com/featured/lower-falls-from-red-rock-point-greg-norrell.html][img]http://greg-norrell.artistwebsites.com/displayartworkartistwebsites.html?id=2191443&width=249&height=166[/img][/url]
I should note, there have been a number of vulnerabilities in Blogger's history with respect to XSS and other nasties getting in through their filtering being compromised. Their filtering is, probably, secure these days - until the next thing comes along. By not actually using raw HTML, SMF automatically gets a free pass on these things.
<a href='http://greg-norrell.artistwebsites.com/featured/lower-falls-from-red-rock-point-greg-norrell.html' size='20'><img src='http://greg-norrell.artistwebsites.com/displayartworkartistwebsites.html?id=2191443&width=249&height=166' alt='Art Prints' title='Art Prints' style='border: none;'></a>
Ah Arantor decoded it!!
Thats how you would do it as he has shown above your post!!!
This way you get what you want while maintaining security!
Thanks Arantor. Enclosing the link within the Code tag doesn't display the link in the forum, just the code. I need to be able to display the code An example of it working on a blog is at the link below
http://blog.qthecollection.com/
QuoteEnclosing the link within the Code tag doesn't display the link in the forum
No, of course it doesn't. The code tag is for writing code, such that it won't be processed as bbcode or anything else. So I used it to show you what the code would look like.
It's really, really simple, you put the image URL in an img bbcode, you put that inside a url bbcode, job done. If you then need an example to show people, you put that in a code tag like I did above to show you what it would be.
admin -> posts and topics -> bulletin board code enable basic html in posts
QuoteThis will allow the posting of some basic HTML tags:
<b>, <u>, <i>, <s>, <em>, <ins>, <del>
<a href="">
<img src="" alt="" />
<br />, <hr />
<pre>, <blockquote>
The HTML as given will not be accepted by the basic HTML routine.
Thanks Arantor. What might be simple to you is not necessarily so to most photographers. I have one member who figured out how to do the BBC Code method, though she complained that she could no longer edit her Alt-Title tags. The vast majority need to be able to hit a button and copy and paste a link. Anything short, and it's not going to happen.
Then they should use the WYSIWYG editor which pretty much does that.
Any other recommendations would be greatly appreciated. I altered the subs.php file to include 'html' as a closable tag. That didn't help. There are plenty of forums where this is not an issue, such as the discussion forum for FAA. Not being able to adjust this will require using a different software platform.
That kind of blackmailing isn't appreciated, sorry... (If you don't do this we will use other software)
If SMF isn't suited for your needs, you'r welcome to try alternatives. Or you can ask for a mod that suits your needs. That's not how SMF works, for a reason.
also --- we will not tell people how to purposefully defeat the very basic security of SMF.
Allowing general users to include unparsed HTML it a HUGE security hole... which is why we don't allow it for anyone except the admin. You would give your general users full admin access to your site - why would you give them HTML?
Finally... if you use the WYSIWYG editor, as arantor suggested, it will probably solve move of your problems
My apologies Margarett. I'm not trying to blackmail anyone. And I am earnestly grateful for all who take the time to provide advice. I'm just surprised there's not a simple solution here and hence I'm worried I may have to go back to the drawing board.
see my post above. there IS a simple solution
QuoteI altered the subs.php file to include 'html' as a closable tag
And the security aspect is unchanged, fortunately.
QuoteThere are plenty of forums where this is not an issue, such as the discussion forum for FAA. Not being able to adjust this will require using a different software platform.
Then use that software platform. Or take the advice already given that you've chosen to ignore.
QuoteMy apologies Margarett. I'm not trying to blackmail anyone. And I am earnestly grateful for all who take the time to provide advice. I'm just surprised there's not a simple solution here and hence I'm worried I may have to go back to the drawing board.
Except "if you don't help me I'll have to look at other forum solutions" is blackmail. It is no different to a member coming onto your site and saying "if you don't implement <this> I'll take my content elsewhere". It's still blackmail, pure and simple, trying to get you to do something.
I'm still trying to understand what you want to do that isn't covered by Wysiwyg editor. Toggle to Wysiwyg using the (https://www.simplemachines.org/community/proxy.php?request=http%3A%2F%2Fmedia.simplemachinesweb.com%2Fsmf%2Fdefault%2Fimages%2Fbbc%2Ftoggle.gif&hash=8d4176fb384269a9f2664258b6a073d1d47611c3) button or set it as default for all your members in Admin > Configuration > Current Theme > Member Options > Change current options for all members using this theme > Show WYSIWYG editor on post page by default.
Thanks Chalkcat. I'm a photographer. To make a living, I've managed to produce a few websites. I am not accomplished as a web programmer at all. I managed to set this up a few days ago. Most of my forum members are from FineArtAmerica, and they want to post their image links. I tried toggling the WYSIWYG thing and got no where.
I meant no disrespect to anyone here. I imagine this is how some or most of you make your living.
Not me, I earn my living exchanging beans in a goldfish bowl. I just do this for fun, same as most of us here - we don't get paid for this ;)
What do you mean you "got nowhere" with Wysiwyg? In what way does it not meet your needs? Is this mod any help? http://custom.simplemachines.org/mods/index.php?mod=2745
I uploaded that mod and it failed to install (there was no 'Install' button for it in the package manager. Thanks for the suggestion.
Just another thought: why can't they just post their images on a regular image hosting platform?
I'm not saying that you should change all your habits just because I say so... But why would an image needs to be hosted embed in a HTML page?
Quote from: Norrell on November 24, 2013, 02:05:11 PM
I imagine this is how some or most of you make your living.
How mistaken you are :P
I've said it elsewhere, I will say it again... I actually turn down consulting contracts to make sure I have free time to give up on this project. The amount of ungrateful people I run into is surprising.
Margarett - There are hundreds of thousand of photographers trying to sell literally millions of images online. Our biggest challenge is getting potential customers to find our links where they can buy prints. So we embed those links everywhere we possibly can, tweaking keywords and title tags so that someone using a search engine to look for something specific ends up on our buy page. We could use attachments or upload to galleries. That will get the image seen. But that doesn't usually get them sold.
This (if it works) is using the BBC Code. Any idea how difficult it would be to install a script that automatically swaps for a particular post a new image, new link, and new tags ??
(https://www.simplemachines.org/community/proxy.php?request=http%3A%2F%2Fgreg-norrell.artistwebsites.com%2Fdisplayartworkartistwebsites.html%3Fid%3D2191443%26amp%3Bwidth%3D498%26amp%3Bheight%3D332%26%23039%3B%2520alt%3D%26%23039%3BArt%2520Prints%26%23039%3B%2520title%3D%26%23039%3BArt%2520Prints%26%23039%3B%2520style%3D%26%23039%3Bborder%3A%2520none%3B&hash=40440f56488f777149deb7fcb74ea45a41ae2c07) (http://greg-norrell.artistwebsites.com/featured/lower-falls-from-red-rock-point-greg-norrell.html)
This is what you posted
(https://www.simplemachines.org/community/proxy.php?request=http%3A%2F%2Fgreg-norrell.artistwebsites.com%2Fdisplayartworkartistwebsites.html%3Fid%3D2191443%26amp%3Bwidth%3D498%26amp%3Bheight%3D332%26%23039%3B%2520alt%3D%26%23039%3BArt%2520Prints%26%23039%3B%2520title%3D%26%23039%3BArt%2520Prints%26%23039%3B%2520style%3D%26%23039%3Bborder%3A%2520none%3B&hash=40440f56488f777149deb7fcb74ea45a41ae2c07) (http://greg-norrell.artistwebsites.com/featured/lower-falls-from-red-rock-point-greg-norrell.html)
As you see, and as YOU posted, doable in SMF.
Thank you Margarett. Yes, I managed to do it. I would expect more than 90% of my forum members would give up before getting it right.
Don't underestimate your members - anyone who can work a modern camera is already more technically-minded than I am ;D
So's my cat. ;)
[/Thread-drift]
What about just enabling basic html through the admin tick box? That should be okay right??
I did that but it doesn't allow members to use the html tag.
@Chalkcat - maybe that's our problem, after learning our cameras, photoshop, lightroom and other software, we have no RAM left for other things.
Quote from: K@ on November 24, 2013, 04:27:04 PM
So's my cat. ;)
[/Thread-drift]
Oi (https://www.simplemachines.org/community/proxy.php?request=http%3A%2F%2Fchalkcat.com%2FSmileys%2Ffantasticsmileys%2Fpoke.gif&hash=dd913858baf52a69a291cca4696daf56824f45cd)
(https://www.simplemachines.org/community/proxy.php?request=http%3A%2F%2Fwww.katzy.dsl.pipex.com%2FSmileys%2Fc018.gif&hash=dbf6b10ad78cd31a57feae3f0016b14d8d2c90fa)
Just to clarify...
When your members go to post, using the WYSIWYG editor, they can click on (https://www.simplemachines.org/community/proxy.php?request=http%3A%2F%2Fmedia.simplemachinesweb.com%2Fsmf%2Fdefault%2Fimages%2Fbbc%2Fimg.gif&hash=5f2b43122dc29a431d4be221a674b45de4f09c26) and it'll bring up a box thingy.
They paste the URL to the picture, in there, and click "Submit".
It really is that easy.
I've tried that without success. I click on the upward arrow icon far right, insert link, and get an error. I can post a regular direct image link, just not the full one with the tags from the sales page.
If it's possible, please go to the waterfall link above, copy the link in the box bottom right, and try and repost with WYSIWYG. Perhaps I'm just not doing it right.
Quote from: Norrell on November 24, 2013, 04:30:26 PM
I did that but it doesn't allow members to use the html tag.
@Chalkcat - maybe that's our problem, after learning our cameras, photoshop, lightroom and other software, we have no RAM left for other things.
Why do they need the html tag.. They can use the anchor tag and img tag which is all I saw they needed from your postings. I guess I am a bit lost on how the link you provided would not work "as is" with that tick box checked.
Apparently that's too complicated for them.
I would be most grateful if someone could demonstrate.
I'm seriously thinking that it would be better for you to find another forum software.
Can't they just right-click on the image, copy the image URL and paste that into the box, as I described?
If not, I have to agree with Arantor, with this one.
Yes, they can post a link to a specific image with WYSIWYG. (https://www.simplemachines.org/community/proxy.php?request=http%3A%2F%2Fphotocamel.com%2Fgallery%2Fdata%2F7472%2Fmedium%2FGN8_6844Nsweb.jpg&hash=9172dad899e92ecda748d5ee5b295876e61bc97d)
The problem we've had is posting the link to specific sales pages with tags. If someone can do it, please try from the waterfall page linked above, with the sales link at bottom right.
Ah... I see your problem.
Using IMG tags won't do the URL, too.
What you need, is this:
[url=http://greg-norrell.artistwebsites.com/featured/lower-falls-from-red-rock-point-greg-norrell.html][img alt="Lower Falls" title="Lower Falls"]http://greg-norrell.artistwebsites.com/displayartworkartistwebsites.html?id=2191443&width=498&height=332' alt='Art Prints' title='Art Prints' style='border: none;[/img][/url]
I seem to remember seeing a mod that does that, though...
Thanks K. If you recall the mod, please let me know.
Problem is, the mod authors often give their mods names that don't, always, have much bearing on what they do and there're fifty pages to wade through, to try and find it. That's if it's even in the section I went to.
http://custom.simplemachines.org/mods/index.php?action=search;type=2
As I'm just about to hit the ol' hay, maybe you could wade through them?
If you find something, make sure it's for SMF v2, won't you? The one I seem to remember MIGHT have been for v1.
Thank you K. Will do.
Let us know how you get on, woncha? If you don't find anything, I'll have a butcher's, tomorrow. :)
I wasn't able to find an existing mod to do it. I tried a number of them that seemed close, but nothing did the trick. Still wondering how difficult it would be to add a script to accomplish what I need.... Suggestions are welcome.