How to safely allow embedded YouTube videos?

[Erica]

Hi i got a question not sure if i'm posting it in the right place if so sorry question is i got YouTube video bbcode on my site is there a way to put this code and add in it the color code frame like youtube site has thanks.

<object width="640" height="385"><param name="movie" value="http://www.youtube.com/v/{param}"></param><embed src="http://www.youtube.com/v/{param}" type="application/x-shockwave-flash" width="640" height="385"></embed></object>

[Floris]

Dumb question, but doesn't vB4 have a built-in Youtube add feature that pulls out the video ID for you? Or is that just in the CMS?

No, the default forum classic has an example page with embedded bbcode for youtube. So I assume the default forum comes with a youtube bbcode for embedding.

[feldon23]

Dumb question, but doesn't vB4 have a built-in Youtube add feature that pulls out the video ID for you? Or is that just in the CMS?

[Floris]

I use AME plugin from vBorg, you paste the URL to the video and it auto embeds it upon save. Can't get any more easier.

[thintz]

I believe I am following all of the steps correctly but when I add a video identifier it shows up like this, with one of teh brackets missplaced. HOW did I do that? If I move the bracket and drop this line in the post, it works great! Quick help me, I am about to get a knife and go play in traffic!


[YOUTUBE="BC-j1fAWcrY"][/YOUTUBE]

Here is a link to a thread on my forum where I tried using this and nothing shows because (I think) of the bracket moving.

http://www.nwwforums.com/forum/showthread.php?p=1323#post1323

Update: I have been all over this, redid the code (cut and paste) and have gone through everything I can think of the it still moves the barcket and adds the = for some reason. I am at a loss about why this is happening. Anyone have any ideas?

[MRGTB]

This code validates to XHTML via W3C

<table class="tborder" cellpadding="6" cellspacing="1" border="0" width="572"><tbody><tr><td style="text-align:center"><strong><a href="http://www.youtube.com/watch?v={param}" target="_blank">YouTube Video</a></strong></td></tr></tbody><tbody><tr><td class="alt1" align="center"><object width="560" height="340" type="application/x-shockwave-flash" data="http://www.youtube.com/v/{param}"><param name="movie" value="http://www.youtube.com/v/{param}" /><param name="wmode" value="transparent" /><em><strong>ERROR:</strong> If you can see this, then <a href="http://www.youtube.com/">YouTube</a> is down or you don't have Flash installed.</em></object></td></tr></tbody></table>

Use my image above also

[MRGTB]

Another uTube icon thats the same size as the default ones you use in the editor folder

[Clairey]

Great thread, thanks!

[glassjeg]

I entered everything like it says at the beginning of this thread.When i go to my reply section of a thread nothing concerning youtube is at the top could someone tell me some things i might check.

[ots]

very helpful thanks for the thread!!!

[KW802]

I did the youtube code and uploaded the button that someone created on page 1 of this thread but the button doesn't show, only a bunch of text. How can I fix this?

The image is missing, i believe. Looks like firefox browser.

I am using firefox. I'll look to see why the image isn't there. Thanks.

If you're using a custom style, check to see what editor path is defined for the style is versus where you put the image on your server (ACP => Styles & Templates => Style Manager => {your style} => Image Paths => Text Editor Controls Folder).

[CuseRich]

The image is missing, i believe. Looks like firefox browser.

I am using firefox. I'll look to see why the image isn't there. Thanks.

[Zachery]

The image is missing, i believe. Looks like firefox browser.

[CuseRich]

I did the youtube code and uploaded the button that someone created on page 1 of this thread but the button doesn't show, only a bunch of text. How can I fix this?

[feldon23]

What code should I add in Replacement field (BB code) to put the whole url between [YOUTUBE][/YOUTUBE] ?

for example:
[YOUTUBE]UiyQGphHgGc[/YOUTUBE]

BUT, I want to put the whole url

http://www.youtube.com/watch?v=UiyQGphHgGc

Sorry, but it is beyond the scope of bbCode to try to reverse engineer the videoID out of the Youtube URL. Teach your users how to copy everything after the v= and put it between [youtube]xxxxxx[/youtube] tags.

Code:
<object width="425" height="350"><param name="movie" value="http://www.youtube.com/v/{param}"></param><embed src="http://www.youtube.com/v/{param}" type="application/x-shockwave-flash" width="425" height="350"></embed></object>

Allowing your users to post full HTML is a major security vulnerability.