PDA

View Full Version : URL in comments problem


alucard
03-01-2006, 09:59 AM
Hi all

I seem to be having a problem with URL's in my comments.

e.g. if a URL in the comments using href tag, the entire comment after the tag opening <a is not displayed. I tried Markdown syntax, but even that doesn't work.


I am running PP 1.5 with Pixelgrain template.

thanks

alucard
03-01-2006, 10:12 AM
Hi all

I seem to be having a problem with URL's in my comments.

e.g. if a URL in the comments using href tag, the entire comment after the tag opening <a is not displayed. I tried Markdown syntax, but even that doesn't work.


I am running PP 1.5 with Pixelgrain template.

thanks

played around in the index.php. commenting the line

$message = clean($message,'html');

seemed to solve the issue. Is it ok to do this? :)

se.nsuo.us
03-01-2006, 10:26 AM
Allowing html in your comment opens your site to XSS attacks - please search the forum for XSS

alucard
03-01-2006, 11:19 AM
Allowing html in your comment opens your site to XSS attacks - please search the forum for XSS

oh forgot about that!! so, either I allow only plain text in my comments, or the some HTML patch that you had put up for download? Am I right in assuming that?

thanks :)

se.nsuo.us
03-01-2006, 11:28 AM
Yes... but do be careful with some HTML allowed patch :)

alucard
03-01-2006, 11:34 AM
Yes... but do be careful with some HTML allowed patch :)

thanks, seems to work for now. ;)

if the spammer problem persists, then I might disallow all html content in the comments field. :)