Posting HTML In The Forums Problem

Involved Joined: Feb 03, 2006 Posts: 269

Quick Question

I have html enabled on the forums all im trying to do is post simple html in the forums its table code thats all and i get the forbidden screen

Code:

<table border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse" width="98%" id="table12">


    <tr>


      


      <td class="blockcenter" width="100%">

Thats what im trying to post... ive looked at the allowed Allowed HTML tags
Separate tags with commas in the forums admin ... and added a shed load i found ... lol

to see if that was the issue

Code:

b,I,u,p,pre,html,layer,head,style,title,div,color,font,meta,body,table,width,tr,scope,


center,iframe,align,left,right,table,td,th,title,tt,marquee,input,bgcolor,align,top,middle,


hr,s,br,h1,h2,h3,h4,h5,h6,li,img,embed,textarea,ul,ol,strong,small,dir,form,script,span,

But that didnt resolve it either... any one have any thoughts ?

Thx

Ped

registered · Posted: Mon Jan 08, 2007 10:29 pm

Forbidden doesn't sound like a problem with phpNuke or the forums. Rather, it sounds like a server-based protection system like mod_security
Ask your host whether they are using such a system

Posted: Tue Jan 09, 2007 3:13 am

I think your right ! lol

Ive got a fresh install of RN on a separate domain using the same host and i just posted the same table code and guess what ! It stripped the same dam code !

Is there any thing i can do/to get around this problem ?

Thx for the fast response too Evaders, appriciated

registered · Posted: Tue Jan 09, 2007 7:16 am

I believe "style" was getting caught by NukeSentinel??? Not 100% sure, but I do recall seeing that in the blocker code. The stripping of the code sounds more like the $allowableHTML array in config.php.

However, be careful adding style back in as an allowed tag. This can be used for XSS style attacks. It would be much better to not use in-line CSS anyways...

Posted: Tue Jan 09, 2007 7:25 am

hmm but how come i can post it here at Ravenphpscripts

Im trying to post this

Code:

<table border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse" width="98%" id="table12">


    <tr>


     


      <td class="blockcenter" width="100%">

And it ends up like

Code:

<table>


    <tr>


     


      <td>

Im confused now Rolling Eyes

(doesnt take much, trust me ! lol)

Posted: Tue Jan 09, 2007 10:32 am

Just for grins and gigles have at look at admin-> Forum ->Configuration there is a setting there to allow specific html tags within forum.
This may not override other protection such as Sentinel or the main allowed html array but it is worth noting the setting in forums exists.

Posted: Thu Jan 11, 2007 5:12 pm

Yeah that was my first port of call, i added all of these to see if that was the issue

Code:

b,I,u,p,pre,html,layer,head,style,title,div,color,font,meta,body,table,width,tr,scope,


center,iframe,align,left,right,table,td,th,title,tt,marquee,input,bgcolor,align,top,middle,


hr,s,br,h1,h2,h3,h4,h5,h6,li,img,embed,textarea,ul,ol,strong,small,dir,form,script,span

But still the same !

Is there anything i can do to get round this guys Rolling Eyes

Posted: Mon Jan 15, 2007 10:09 pm

Unfortunately, I don't have the answer off the top of my head. Sure wish 64bitguy was still active... he'd know in a heartbeat!

Posted: Tue Jan 16, 2007 2:18 am

Thanks Montego,

Im really fudged of now... all i want to do is post simple html in the forums ... its stupid it lets me use the embed tags so i can post You Tube video's

Posted: Sun Jan 21, 2007 7:16 am

Sorry if this has already been asked and answered, but I've been away for quite awhile... have you tried turning OFF HTML in your forums? You really don't need the HTML formatting to show up right? What you are really interested in is being able to show it as code?

Posted: Sun Jan 21, 2007 7:31 am

yup you got it in one

I just want to be able to post theme edits ect.

The HTML code was off for a while when we first started up but i was getting messages some times when posting messages

Forbidden if i remember rightly or it could have been you are not allowed to access modules.php or admin.php i cant recall its a while back now... but i thought that might be because of the html being turned off, so i turned it on and ive not had the message since funily enough.

and no ive not fixed her yet !

thx for your concern montego, i dont know what to do ! Bang Head

Posted: Sun Jan 21, 2007 9:02 am

Quote:

i dont know what to do

Me neither, but when I get some time, I'll try to do some of this. I know that 64bitguy had recoded BBtoNuke some to make this work better, but, unfortunately, he never released any of it... Sad