making nuke wrap module work in IE 7

Involved Joined: Apr 22, 2006 Posts: 356

Is there a way to make the nuke wrap module work in IE7.0? I have been able to use it with ie 6.0 by turning auto resize off and specifying pixel sizes for the height and width of the iframe but this does not work in 7.0 the width is fine but the height is only 20-30 pixels tall.

The mod works with netscape and mozilla just fine and ie 6.0.

registered · Posted: Wed Jan 03, 2007 6:17 pm

Not sure. IFRAMES are really bad, bad, bad IMO because you are not in control of what gets displayed in them. All it takes is someone to get hacked with something nasty, and some unsuspecting soul comes to your site and gets a nasty payload.

What are you trying to "wrap"? Do you have control over the HTML? If so, strip out everything above the <b~ody> tag and then everything below the closing </b~ody> tag and just bring it into your module by reading it and echoeing it back.

Posted: Wed Jan 03, 2007 6:27 pm

Well, I am wrapping a CM gallery. I could use a version that integrates into nuke but if I use the wrapper, then I can keep it updated with the latest versions and security fixes. Unless there is a better way to do it. From what I have read here, no one is to high on any of the galleries as far as security goes.

The next thing, I am adding a flash chat module and going to wrap it so it is embedded in the site so to speak.

If you have any other suggestions I would be greatful.

Posted: Wed Jan 03, 2007 6:38 pm

Quote:

I could use a version that integrates into nuke but if I use the wrapper, then I can keep it updated with the latest versions and security fixes.

Is the "wrapper" for the gallery just "stubs" allowing it to run under nuke or are they replacement files? If the former, I'd say just integrate it in.

Quote:

From what I have read here, no one is to high on any of the galleries as far as security goes.

A security hole is a security hole regardless of where it resides. You could have this running on another server, put it into an IFRAME, someone hack your other server and place that nasty little payload that I mentioned above.

I would pick a reputable one, such as Gallery (either the most recent 1.5.x version or the latest G2) and just keep it updated when patches are released. Then, I would also be very careful how you allow file uploads. I would NOT open that up to anonymous or even to registered users unless YOU control their registration approval and can vouch for them.

Quote:

The next thing, I am adding a flash chat module and going to wrap it so it is embedded in the site so to speak.

Same comments as above apply. If the module has holes in it, it really does not matter much where you place it. All you are doing is giving a hacker a challenge. They like those very much...

Personally, you must know what it is you are putting onto your site and keep up on patches or review the code yourself, find the holes and patch. Also, keep very good backups of the db and your files.

If a hacker wants to get in badly enough, where there is a will there is a way... You just have to due your best due diligence and then try and sleep easy at night. If you can't, you're in the wrong business my friend. Wink

Theme Guru Joined: Nov 01, 2003 Posts: 1006

nuke wrap works just perfectly in all instances on my hauntedtales.net site. You may go and look for yourself. The map, ouija, etc are all nuke wrap. I am on ie 7

Posted: Wed Jan 03, 2007 6:59 pm

Thanks much Montego. I am not sure what a "stub" is. The module is located at spidean.com. I have it implimented at sisriders.com.

Is Gallery more secure than the latest coppermine version? Does it integrate into nuke?

Which it looks as if my host is having problems, all my sites have been down about 45 min now.

Posted: Wed Jan 03, 2007 7:04 pm

jaded wrote:

nuke wrap works just perfectly in all instances on my hauntedtales.net site. You may go and look for yourself. The map, ouija, etc are all nuke wrap. I am on ie 7

Can you tell me which wrap mod you are using? Which version? Maybe where you got it from if it is different from the one I am using?

Posted: Wed Jan 03, 2007 8:17 pm

Quote:

Is Gallery more secure than the latest coppermine version? Does it integrate into nuke?

I have used the older 1.5.x Gallery for years with no problems. I have heard others having success with G2, except the integration has been troublesome to some. I have not tried it yet, but will be upgrading my 1.5.x versions here soon.

I was able to see jaded's NukeWrapped pages just fine with 7.0, so not sure what the issue would be unless there is some setting in your browser regarding IFRAMES. Might be worth looking into.

registered · Posted: Thu Jan 04, 2007 12:53 am

I'm not sure why IE 7 would have problems with IFrames. Seems to work fine for me

You can easily write your own iframes code as a module file. That would be the easiest way instead of going through NukeWrap