Clan Adverts

Sponsors

CT on Facebook

Latest Product

User Box

Anonymous
38.107.179.219
Nickname:

Password:

Security Code
Security Code
Type Security Code


PND Downloads Feed

Phpnuke Downloads
How to Delete or Reset yo...
How to Delete or Reset your PHPNuke Admin Account
Lost your admin password ?  Cant login to your admin account ?This sh...
Back Online & Stuff
Back Online & Stuff
Look at us with our nifty website back up and running… Seriousl...
How to edit the admins in...
How to edit the admins in the forums
Here is a way to make someone admin in your forums on your Evo site. I...
Demo Splash Screen
Demo Splash Screen
Ped @ Clan Themes has released a simple splash screen entrance hack. ...
Free Phpnuke Business The...
Free Phpnuke Business Theme 6
This is the 6th Business theme for Phpnuke that Clan Themes has releas...
Tricked Out Slider
Tricked Out Slider
We have seen some great new things come out of Tricked Out News and th...

Custom Work

PHP Nuke Custom Work

www.clanthemes.com :: View topic - Recommended settings for $allowablehtml
Recommended settings for $allowablehtml

6 Replies / 2173 Views


Post new topic   Reply to topic  

   www.clanthemes.com Forum Index » General PhpNuke

View previous topic :: View next topic


LORAXX
Reputation: 6.5 Add RepSubtract Rep
Local time: 9:34 AM

blank.gif

Armour Whore
Armour Whore

0.03 posts per day
Medals: 0

Joined: Jan 17, 2008
Last Visit: 18 Dec 2008
Posts: 43
Points: 718 

Post Recommended settings for $allowablehtml Posted: Thu Jan 24, 2008 5:22 pm

Shop Purchases:
Multi Gaming (Warrior) Theme · Clan Roster v1.7 Php Nuke Module

Anybody have comment on the recommend settings for

$AllowableHTML =


in you config.php file???

I DON NOT want any security issues. Given I do not want any security issues what HTML codes are ok to allow? Aslo if they were safe to allow why didn't they leave this as the default setting?

Thanks
 

 
View user's profileSend private message Reply with quote

Ped
Reputation: 62.8 Add RepSubtract Rep
votes: 35
Local time: 3:34 PM
Location: Great British Empire
uk.gif

Site Founder
Site Founder

2.33 posts per day
Medals: 2 (View more...)
Super Dedicated User (Amount: 1)
Theme Guru
Theme Guru
Joined: Nov 13, 2006
Last Visit: 09 Feb 2012
Posts: 4455
Points: 180884 

Post Re: Recommended settings for $allowablehtml Posted: Thu Jan 24, 2008 5:46 pm

Shop Purchases:
Clan Roster 2.0 · Bad Company 2 Vietnam Xtreme Theme

http://www.clan-themes.co.uk/tutorials-view-144-allow-html-tags-in-phpnuke.html

there's are a lot of threads about this, i presume your not using raven nuke, and are having trouble adding stuff to your site ?
 

 
View user's profileSend private messageSend e-mail Reply with quote

LORAXX
Reputation: 6.5 Add RepSubtract Rep
Local time: 9:34 AM

blank.gif

Armour Whore
Armour Whore

0.03 posts per day
Medals: 0

Joined: Jan 17, 2008
Last Visit: 18 Dec 2008
Posts: 43
Points: 718 

Post Recommended settings for $allowablehtml Posted: Thu Jan 24, 2008 6:14 pm

Shop Purchases:
Multi Gaming (Warrior) Theme · Clan Roster v1.7 Php Nuke Module

Yea,

I'm wild and crazy and not using ravenNuke as bascially everyone recommended on your site. Thanks for the post.

I will try out ravenNuke on my next website.
 

 
View user's profileSend private message Reply with quote


LORAXX
Reputation: 6.5 Add RepSubtract Rep
Local time: 9:34 AM

blank.gif

Armour Whore
Armour Whore

0.03 posts per day
Medals: 0

Joined: Jan 17, 2008
Last Visit: 18 Dec 2008
Posts: 43
Points: 718 

Post Recommended settings for $allowablehtml Posted: Thu Jan 24, 2008 6:23 pm

Shop Purchases:
Multi Gaming (Warrior) Theme · Clan Roster v1.7 Php Nuke Module

Your link above Ped is great, but it does not say which HTML codes are dangerous. What are the safe HTML codes?
 

 
View user's profileSend private message Reply with quote

LORAXX
Reputation: 6.5 Add RepSubtract Rep
Local time: 9:34 AM

blank.gif

Armour Whore
Armour Whore

0.03 posts per day
Medals: 0

Joined: Jan 17, 2008
Last Visit: 18 Dec 2008
Posts: 43
Points: 718 

Post Recommended settings for $allowablehtml Posted: Fri Jan 25, 2008 1:18 pm

Shop Purchases:
Multi Gaming (Warrior) Theme · Clan Roster v1.7 Php Nuke Module

It is interesting. There is alot of chatter on the dangers but no one post the html codes that are safe.

Here is one link that seems some what official, but guidance for what html is safe is still weak.


http://www.ibiblio.org/pub/Linux/docs/HOWTO/other-formats/pdf/PHP-Nuke-HOWTO.pdf


search the topic in the link for $AllowableHTML
 

 
View user's profileSend private message Reply with quote

Ped
Reputation: 62.8 Add RepSubtract Rep
votes: 35
Local time: 3:34 PM
Location: Great British Empire
uk.gif

Site Founder
Site Founder

2.33 posts per day
Medals: 2 (View more...)
Super Dedicated User (Amount: 1)
Theme Guru
Theme Guru
Joined: Nov 13, 2006
Last Visit: 09 Feb 2012
Posts: 4455
Points: 180884 

Post Re: Recommended settings for $allowablehtml Posted: Fri Jan 25, 2008 1:43 pm

Shop Purchases:
Clan Roster 2.0 · Bad Company 2 Vietnam Xtreme Theme

Im aware that there are loads of topics on this article.. I have had problems in the past, and the easy way around i found was to stick with 7.6 nuke, thats why i recommend Ravens Version because its tried and tested and works great.
here is a list of Ravens allowable HTML tage taken direclty from the config.php
Code:
$AllowableHTML = array(
    'a' => array('href' => 1, 'target' => 1, 'title' => array('minlen' => 4, 'maxlen' => 120)),
    'b' => array(),
    'blockquote' => array(),
    'br' => array(),
    'center' => array(),
    'div' => array('align' => 1),
    'em' => array(),
    'font' => array('face' => 1, 'style' => 1, 'color' => 1, 'size' => array('minval' => 1, 'maxval' => 7)),
    'h1'=>array(),
    'h2'=>array(),
    'h3'=>array(),
    'h4'=>array(),
    'h5'=>array(),
    'h6'=>array(),
    'hr' => array(),
    'i' => array(),
    'img' => array('alt' => 1, 'src' => 1, 'hspace' => 1, 'vspace' => 1, 'width' => 1, 'height' => 1, 'border' => 1, 'align' => 1),
    'li' => array(),
    'ol' => array(),
    'p' => array('align' => 1),
    'pre' => array('align' => 1),
    'span' =>array('class' => 1, 'style' => array('font-family' => 1, 'color' => 1)),
    'strong' => array(),
    'strike'=>array(),
    'sub'=>array(),
    'sup'=>array(),
    'table' => array('align' => 1, 'border' => 1, 'cell' => 1, 'width' => 1, 'cellspacing' => 1, 'cellpadding' => 1),
    'td' => array('align' => 1, 'width' => 1, 'valign' => 1, 'height' => 1, 'rowspan' => 1, 'colspan' => 1 ),
    'tr' => array('align' => 1),
    'tt'=>array(),
    'u' => array(),
    'ul' => array(),
);


Hope that helps, just Google Allowable HTML and im sure it will bring up all sorts !
 

 
View user's profileSend private messageSend e-mail Reply with quote


LORAXX
Reputation: 6.5 Add RepSubtract Rep
Local time: 9:34 AM

blank.gif

Armour Whore
Armour Whore

0.03 posts per day
Medals: 0

Joined: Jan 17, 2008
Last Visit: 18 Dec 2008
Posts: 43
Points: 718 

Post Recommended settings for $allowablehtml Posted: Fri Jan 25, 2008 5:19 pm

Shop Purchases:
Multi Gaming (Warrior) Theme · Clan Roster v1.7 Php Nuke Module

I trust you and your team very much at this point. If I had not been such a noob (this is only my second week doing anything with website develop/design/etc) I would have install raven. However, I was under time pressure from my team to get something up. Besides not being able to center my html images in contents I have not had any problems.



AGAIN THANKS ALL WHO SUPPORT ME. I'm getting less nooby.

Ped - checkout the site, I thinks its going well since I'm only 1 week smart.

http://www.brothers-in-arm.com/
 

 
View user's profileSend private message Reply with quote
Post new topic   Reply to topic  
   www.clanthemes.com Forum Index » General PhpNuke


 
6 Replies / 2173 Views
Page 1 of 1
All times are GMT
Display posts from previous:   
 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum