News:

Want to get involved in developing SMF, then why not lend a hand on our github!

Main Menu

Enable html tag for members

Started by Norrell, November 24, 2013, 12:02:28 PM

Previous topic - Next topic

Norrell

I have a new photography forum in which members need to post links from their FineArtAmerica accounts. Admins can use  tag, but members cannot. How is this adjusted? Any help would be appreciated. I realize doing this is regarded as security risk (not sure what specific risks though). But not being able to change this would require my using other software.

- Greg

margarett

A link can be perfectly posted without HTML
Se forem conduzir, não bebam. Se forem beber... CHAMEM-ME!!!! :D

QuoteOver 90% of all computer problems can be traced back to the interface between the keyboard and the chair

Arantor

You have choices. You can use the img tag for linking images directly, you can use the url bbcode for linking to it. I'm not sure what you actually need beyond that.

As for 'security risk', the risk of using raw HTML is that your account could be taken over.

Norrell

Hopefully I can post an example link. Every image on FineArtAmerica has an image link in the bottom corner for members to post in blogs and on FAA discussion boards. It works perfectly on Blogger sites, for example. I haven't found a way to make it work with our board.

If there's an alternate suggestion how to accomplish this, I'm all ears. Since it works on Blogger and FAA and they remain secure, it should be safely possible for our forum. Thanks again for any suggestions.

<a href='http://greg-norrell.artistwebsites.com/featured/lower-falls-from-red-rock-point-greg-norrell.html'; size='20'><img src='http://greg-norrell.artistwebsites.com/displayartworkartistwebsites.html?id=2191443&width=249&height=166'; alt='Art Prints' title='Art Prints' style='border: none;'></a>

Gargoyle

That got butchered...

Maybe place it into the code tags so the link isn't so destroyed?

Arantor

[url=http://greg-norrell.artistwebsites.com/featured/lower-falls-from-red-rock-point-greg-norrell.html][img]http://greg-norrell.artistwebsites.com/displayartworkartistwebsites.html?id=2191443&width=249&height=166[/img][/url]

I should note, there have been a number of vulnerabilities in Blogger's history with respect to XSS and other nasties getting in through their filtering being compromised. Their filtering is, probably, secure these days - until the next thing comes along. By not actually using raw HTML, SMF automatically gets a free pass on these things.

Norrell

<a href='http://greg-norrell.artistwebsites.com/featured/lower-falls-from-red-rock-point-greg-norrell.html' size='20'><img src='http://greg-norrell.artistwebsites.com/displayartworkartistwebsites.html?id=2191443&width=249&height=166' alt='Art Prints' title='Art Prints' style='border: none;'></a>

Gargoyle

Ah Arantor decoded it!!

Thats how you would do it as he has shown above your post!!!

This way you get what you want while maintaining security!

Norrell

Thanks Arantor.  Enclosing the link within the Code tag doesn't display the link in the forum, just the code. I need to be able to display the code  An example of it working on a blog is at the link below
http://blog.qthecollection.com/

Arantor

QuoteEnclosing the link within the Code tag doesn't display the link in the forum

No, of course it doesn't. The code tag is for writing code, such that it won't be processed as bbcode or anything else. So I used it to show you what the code would look like.

It's really, really simple, you put the image URL in an img bbcode, you put that inside a url bbcode, job done. If you then need an example to show people, you put that in a code tag like I did above to show you what it would be.

Illori

admin -> posts and topics -> bulletin board code enable basic html in posts

QuoteThis will allow the posting of some basic HTML tags:

    <b>, <u>, <i>, <s>, <em>, <ins>, <del>
    <a href="">
    <img src="" alt="" />
    <br />, <hr />
    <pre>, <blockquote>

Arantor

The HTML as given will not be accepted by the basic HTML routine.

Norrell

Thanks Arantor. What might be simple to you is not necessarily so to most photographers. I have one member who figured out how to do the BBC Code method, though she complained that she could no longer edit her Alt-Title tags. The vast majority need to be able to hit a button and copy and paste a link. Anything short, and it's not going to happen.

Arantor

Then they should use the WYSIWYG editor which pretty much does that.

Norrell

Any other recommendations would be greatly appreciated. I altered the subs.php file to include 'html' as a closable tag.  That didn't help.  There are plenty of forums where this is not an issue, such as the discussion forum for FAA.  Not being able to adjust this will require using a different software platform.

margarett

That kind of blackmailing isn't appreciated, sorry... (If you don't do this we will use other software)

If SMF isn't suited for your needs, you'r welcome to try alternatives. Or you can ask for a mod that suits your needs. That's not how SMF works, for a reason.
Se forem conduzir, não bebam. Se forem beber... CHAMEM-ME!!!! :D

QuoteOver 90% of all computer problems can be traced back to the interface between the keyboard and the chair

Kindred

also --- we will not tell people how to purposefully defeat the very basic security of SMF.

Allowing general users to include unparsed HTML it a HUGE security hole...  which is why we don't allow it for anyone except the admin.  You would give your general users full admin access to your site - why would you give them HTML?


Finally...   if you use the WYSIWYG editor, as arantor suggested, it will probably solve move of your problems
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

Norrell

My apologies Margarett. I'm not trying to blackmail anyone. And I am earnestly grateful for all who take the time to provide advice. I'm just surprised there's not a simple solution here and hence I'm worried I may have to go back to the drawing board.

Kindred

see my post above.  there IS a simple solution
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

Arantor

QuoteI altered the subs.php file to include 'html' as a closable tag

And the security aspect is unchanged, fortunately.

QuoteThere are plenty of forums where this is not an issue, such as the discussion forum for FAA.  Not being able to adjust this will require using a different software platform.

Then use that software platform. Or take the advice already given that you've chosen to ignore.

QuoteMy apologies Margarett. I'm not trying to blackmail anyone. And I am earnestly grateful for all who take the time to provide advice. I'm just surprised there's not a simple solution here and hence I'm worried I may have to go back to the drawing board.

Except "if you don't help me I'll have to look at other forum solutions" is blackmail. It is no different to a member coming onto your site and saying "if you don't implement <this> I'll take my content elsewhere". It's still blackmail, pure and simple, trying to get you to do something.

Chalky

I'm still trying to understand what you want to do that isn't covered by Wysiwyg editor.  Toggle to Wysiwyg using the button or set it as default for all your members in Admin > Configuration > Current Theme > Member Options > Change current options for all members using this theme > Show WYSIWYG editor on post page by default.

Norrell

Thanks Chalkcat. I'm a photographer. To make a living, I've managed to produce a few websites. I am not accomplished as a web programmer at all. I managed to set this up a few days ago. Most of my forum members are from FineArtAmerica, and they want to post their image links. I tried toggling the WYSIWYG thing and got no where.

I meant no disrespect to anyone here. I imagine this is how some or most of you make your living.

Chalky

Not me, I earn my living exchanging beans in a goldfish bowl.  I just do this for fun, same as most of us here - we don't get paid for this  ;)

What do you mean you "got nowhere" with Wysiwyg?  In what way does it not meet your needs?  Is this mod any help?  http://custom.simplemachines.org/mods/index.php?mod=2745

Norrell

I uploaded that mod and it failed to install (there was no 'Install' button for it in the package manager. Thanks for the suggestion.

margarett

Just another thought: why can't they just post their images on a regular image hosting platform?
I'm not saying that you should change all your habits just because I say so... But why would an image needs to be hosted embed in a HTML page?

Quote from: Norrell on November 24, 2013, 02:05:11 PM
I imagine this is how some or most of you make your living.
How mistaken you are :P
Se forem conduzir, não bebam. Se forem beber... CHAMEM-ME!!!! :D

QuoteOver 90% of all computer problems can be traced back to the interface between the keyboard and the chair

Arantor

I've said it elsewhere, I will say it again... I actually turn down consulting contracts to make sure I have free time to give up on this project. The amount of ungrateful people I run into is surprising.

Norrell

Margarett - There are hundreds of thousand of photographers trying to sell literally millions of images online. Our biggest challenge is getting potential customers to find our links where they can buy prints. So we embed those links everywhere we possibly can, tweaking keywords and title tags so that someone using a search engine to look for something specific ends up on our buy page.  We could use attachments or upload to galleries. That will get the image seen. But that doesn't usually get them sold.

Norrell

#27
This (if it works) is using the BBC Code.  Any idea how difficult it would be to install a script that automatically swaps for a particular post a new image, new link, and new tags ??

"Lower Falls"

margarett

This is what you posted
"Lower Falls"
As you see, and as YOU posted, doable in SMF.
Se forem conduzir, não bebam. Se forem beber... CHAMEM-ME!!!! :D

QuoteOver 90% of all computer problems can be traced back to the interface between the keyboard and the chair

Norrell

Thank you Margarett. Yes, I managed to do it.  I would expect more than 90% of my forum members would give up before getting it right.

Chalky

Don't underestimate your members - anyone who can work a modern camera is already more technically-minded than I am  ;D

kat


Gargoyle

What about just enabling basic html through the admin tick box?  That should be okay right??

Norrell

I did that but it doesn't allow members to use the html tag.

@Chalkcat - maybe that's our problem, after learning our cameras, photoshop, lightroom and other software, we have no RAM left for other things.

Chalky


kat



Just to clarify...

When your members go to post, using the WYSIWYG editor, they can click on and it'll bring up a box thingy.

They paste the URL to the picture, in there, and click "Submit".

It really is that easy.

Norrell

I've tried that without success. I click on the upward arrow icon far right, insert link, and get an error.  I can post a regular direct image link, just not the full one with the tags from the sales page.

If it's possible, please go to the waterfall link above, copy the link in the box bottom right, and try and repost with WYSIWYG.  Perhaps I'm just not doing it right.

Gargoyle

Quote from: Norrell on November 24, 2013, 04:30:26 PM
I did that but it doesn't allow members to use the html tag.

@Chalkcat - maybe that's our problem, after learning our cameras, photoshop, lightroom and other software, we have no RAM left for other things.

Why do they need the html tag.. They can use the anchor tag and img tag which is all I saw they needed from your postings.  I guess I am a bit lost on how the link you provided would not work "as is" with that tick box checked.

Arantor

Apparently that's too complicated for them.

Norrell

I would be most grateful if someone could demonstrate.

Arantor

I'm seriously thinking that it would be better for you to find another forum software.

kat

Can't they just right-click on the image, copy the image URL and paste that into the box, as I described?

If not, I have to agree with Arantor, with this one.

Norrell

Yes, they can post a link to a specific image with WYSIWYG. 
The problem we've had is posting the link to specific sales pages with tags.  If someone can do it, please try from the waterfall page linked above, with the sales link at bottom right.

kat

Ah... I see your problem.

Using IMG tags won't do the URL, too.

What you need, is this:

[url=http://greg-norrell.artistwebsites.com/featured/lower-falls-from-red-rock-point-greg-norrell.html][img alt="Lower Falls" title="Lower Falls"]http://greg-norrell.artistwebsites.com/displayartworkartistwebsites.html?id=2191443&width=498&height=332' alt='Art Prints' title='Art Prints' style='border: none;[/img][/url]

I seem to remember seeing a mod that does that, though...

Norrell

Thanks K. If you recall the mod, please let me know.

kat

Problem is, the mod authors often give their mods names that don't, always, have much bearing on what they do and there're fifty pages to wade through, to try and find it. That's if it's even in the section I went to.

http://custom.simplemachines.org/mods/index.php?action=search;type=2

As I'm just about to hit the ol' hay, maybe you could wade through them?

If you find something, make sure it's for SMF v2, won't you? The one I seem to remember MIGHT have been for v1.

Norrell


kat

Let us know how you get on, woncha? If you don't find anything, I'll have a butcher's, tomorrow. :)

Norrell

I wasn't able to find an existing mod to do it. I tried a number of them that seemed close, but nothing did the trick. Still wondering how difficult it would be to add a script to accomplish what I need.... Suggestions are welcome.

Advertisement: