News:

Bored?  Looking to kill some time?  Want to chat with other SMF users?  Join us in IRC chat or Discord

Main Menu

Enabling Flash in Posts

Started by spliffeh, November 20, 2008, 11:57:30 PM

Previous topic - Next topic

spliffeh

Is it still dangerous to enable flash in SMF (1.1.7)?  From what I read it was once possible to put in a link to execute malicious code.

Is this fixed? Or is there a fix out there so it only allows links to certain sites (youtube)?


Tyrsson

I do not know of very many people that have actually had a successful exploit of flash through an SMF application.

PM at your own risk, some I answer, if they are interesting, some I ignore.

spliffeh

#2
Ok so I enabled it, but it doesn't work? It just shows a white box instead of the youtube video. When I right click it shows the flash menu greyed out and says 'Movie not loaded'.

[flash=200,200]http://www.youtube.com/watch?v=6FahBBnfHAQ[/flash]

and

[flash=425,344]<object width="425" height="344"><param name="movie" value="http://www.youtube.com/v/6FahBBnfHAQ&hl=en&fs=1"></param><param name="allowFullScreen" value="true"></param><param name="allowscriptaccess" value="always"></param><embed src="http://www.youtube.com/v/6FahBBnfHAQ&hl=en&fs=1" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="425" height="344"></embed></object>[/flash]

etc etc... ive tried all kinds of width/height values


What am I doing wrong here?

Tyrsson

Give me one sec and I will try to help you with this. Their is a Mod that will help you with this. I will link it in the next post.
PM at your own risk, some I answer, if they are interesting, some I ignore.

Tyrsson

Well there was a Mod for this I guess it has not been updated yet.

Let me ask you this... Do you have html enabled? If not then you might try that.
PM at your own risk, some I answer, if they are interesting, some I ignore.

ディン1031

Support only via MOD Thread! NO PM Support!
My Forum: ayu][kult Forum
My Mods: My Small Mod Collection
My Parser: DIN1031's ModParser
Current Info: More away the next days, because i've to much work to do :x

Tyrsson

Those would be the ones!! Thanks
PM at your own risk, some I answer, if they are interesting, some I ignore.

青山 素子

The flash tag is for loading an SWF directly. There is a potential for rouge Flash applets to cause issues on the browser-side. It's not huge, but still a possibility.
Motoko-chan
Director, Simple Machines

Note: Unless otherwise stated, my posts are not representative of any official position or opinion of Simple Machines.


Advertisement: