Tweet
Regular members can embed html and swf?!
Hello, I've failed today to work out how this is possible.
Regular members, without any extra privileges, are able to post embed code in my forum, and it's all working. Of course, I don't want them to be able to do this, but have utterly failed to find out what is allowing them to do it.
I have been using this code to test whether I have fixed the problem;
<embed src="http://home.comcast.net/%7Einfectedlogic/T4MotionPoster_Intl.swf" quality="high" pluginspage="http://www.macromedia.com/go/getflashplayer" type="application/x-shockwave-flash" width="454" height="700"></object>
On this forum, that's just showing up as a blob of code, but on mine it's inserting the [awful] Terminator 4 poster. Can anyone help me find the setting that changes this?
I can't find anything relevant in usergroup permissions or forum permissions, and am in a mess now. Many thanks to anyone that can kindly tell me I am idiot but make me think I am learning something.
[edit] I am aware that you cannot allow admins to post html and not members, that it is apparently a global option, I just cannot find it!
Regular members, without any extra privileges, are able to post embed code in my forum, and it's all working. Of course, I don't want them to be able to do this, but have utterly failed to find out what is allowing them to do it.
I have been using this code to test whether I have fixed the problem;
<embed src="http://home.comcast.net/%7Einfectedlogic/T4MotionPoster_Intl.swf" quality="high" pluginspage="http://www.macromedia.com/go/getflashplayer" type="application/x-shockwave-flash" width="454" height="700"></object>
On this forum, that's just showing up as a blob of code, but on mine it's inserting the [awful] Terminator 4 poster. Can anyone help me find the setting that changes this?
I can't find anything relevant in usergroup permissions or forum permissions, and am in a mess now. Many thanks to anyone that can kindly tell me I am idiot but make me think I am learning something.
[edit] I am aware that you cannot allow admins to post html and not members, that it is apparently a global option, I just cannot find it!
Comment