Simple Machines Community Forum

Customizing SMF => SMF Coding Discussion => Topic started by: SaltedWeb on December 02, 2017, 06:11:48 PM

Title: Links inside board descriptions?
Post by: SaltedWeb on December 02, 2017, 06:11:48 PM
Anyone know of a trick or mod to place links inside a boards description.
I would like to have a short link describing more details about certain boards and
putting the info on the description gets long on some of my boards wondered if such a thing exists.?
Thanks
Title: Re: Links inside board descriptions?
Post by: Sir Osis of Liver on December 02, 2017, 06:23:41 PM
You can include a <a></a> link in board description.  You could also do something like this forum (http://startrek.lostworldssff.com/index.php?action=forum).  Mouseover the images for each board.
Title: Re: Links inside board descriptions?
Post by: Arantor on December 02, 2017, 06:29:55 PM
FYI this functionality will be changed in 2.1 to use bbcode because as it currently is, is potentially a security risk (but that can't be fixed without breaking existing sites)
Title: Re: Links inside board descriptions?
Post by: SaltedWeb on December 02, 2017, 08:07:09 PM
Ok thank you ...........marked solved :-)
Title: Re: Links inside board descriptions?
Post by: Gwenwyfar on December 02, 2017, 08:08:56 PM
Quote from: Arantor on December 02, 2017, 06:29:55 PM
FYI this functionality will be changed in 2.1 to use bbcode because as it currently is, is potentially a security risk (but that can't be fixed without breaking existing sites)
How so?
Title: Re: Links inside board descriptions?
Post by: Kindred on December 02, 2017, 08:27:54 PM
If html is allowed in board descriptions, bad code can be run...

I'm general, even though it can be done, html should never be included in board descriptions. It can break things
Title: Re: Links inside board descriptions?
Post by: Gwenwyfar on December 02, 2017, 08:31:41 PM
Quote from: Kindred on December 02, 2017, 08:27:54 PM
If html is allowed in board descriptions, bad code can be run...

I'm general, even though it can be done, html should never be included in board descriptions. It can break things
Well, that field is mostly for admins, other people won't be editing it. But I see your point, was just curious what was the problem.
Title: Re: Links inside board descriptions?
Post by: Kindred on December 02, 2017, 08:35:00 PM
You would be surprised at what some site owners give people access to do
Title: Re: Links inside board descriptions?
Post by: SaltedWeb on December 02, 2017, 09:48:24 PM
Quote from: Kindred on December 02, 2017, 08:35:00 PM
You would be surprised at what some site owners give people access to do
Thats a good point I have seen people do allot of stuff but then if you look at FB even groups there are often a huge lists of mods and admins.
I recall one such FB group had over 150 Admins and like 300 Mods in a group of about 75K  Can imagine very large SMF groups having allot people with Access. I made the mistake once in Xenforo giving just one access and well that turned into a nightmare. After my Satuday evening dribble here it make perfect sense seeing someone else say it :)
Title: Re: Links inside board descriptions?
Post by: Arantor on December 03, 2017, 03:39:53 AM
Quote from: Gwenwyfar on December 02, 2017, 08:31:41 PM
Quote from: Kindred on December 02, 2017, 08:27:54 PM
If html is allowed in board descriptions, bad code can be run...

I'm general, even though it can be done, html should never be included in board descriptions. It can break things
Well, that field is mostly for admins, other people won't be editing it. But I see your point, was just curious what was the problem.

A non admin user with manage boards permission could hijack the admin account.
Title: Re: Links inside board descriptions?
Post by: SaltedWeb on December 03, 2017, 12:33:12 PM
Quote from: Arantor on December 03, 2017, 03:39:53 AM
Quote from: Gwenwyfar on December 02, 2017, 08:31:41 PM
Quote from: Kindred on December 02, 2017, 08:27:54 PM
If html is allowed in board descriptions, bad code can be run...

I'm general, even though it can be done, html should never be included in board descriptions. It can break things
Well, that field is mostly for admins, other people won't be editing it. But I see your point, was just curious what was the problem.

A non admin user with manage boards permission could hijack the admin account.

That interesting in its self to not add links or modify it to allow that kind of access good to know.