Forums / Setup & design / External image in text block

"Please Note:
  • At the specific request of Ibexa we are changing this projects name to "Exponential" or "Exponential (CMS)" effective as of August, 11th 2025.
  • This project is not associated with the original eZ Publish software or its original developer, eZ Systems or Ibexa".

External image in text block

« 
Previous topic
|
Setup & design
|
Next topic
 »
Author Message

Radek Kuchta

Wednesday 03 October 2007 5:54:56 am

Hi all,

I woluld like to allow all registered users use external images (in forum). Usually they are using [img] & [/img] tags. Is there a way for that?

http://ez.no/certification/verify/272582

Radek Kuchta

Monday 22 October 2007 4:08:17 am

Guys, any suggestion on how to implement my idea?

http://ez.no/certification/verify/272582

Helle Andersen

Wednesday 12 August 2009 2:12:07 am

Just use the literal tag and insert ordinary html code. This will produce something like:

<literal class='html'>
<p><a href='http://co2now.org'><img src='http://co2now.org/images/stories/widgets/co2_widget_charney_130.png' alt="Current CO2 concentration in the atmosphere" width="130" height="130" border="0" /></a></p>
</literal>

André R.

Wednesday 12 August 2009 2:27:25 am

Unless you trust ALL your forum users, you should never allow them to use literal.html..
This opens the door for all sorts of security breaches, session hijacking, click jacking, CSRF, XSS and so on..
Allowing people to link to external images is almost just as insecure(vulnerable to CSRF at least), so maybe consider adding a image attribute instead? (so they have to upload it, and only valid images are accepted)

eZ Online Editor 5: http://projects.ez.no/ezoe || eZJSCore (Ajax): http://projects.ez.no/ezjscore || eZ Publish EE http://ez.no/eZPublish/eZ-Publish-Enterprise-Subscription
@: http://twitter.com/andrerom

kracker

The Doctor

Wednesday 12 August 2009 4:05:03 am

@ André R.

Great post! Simply inspiring statement.
I wish I could ...

If only I could get my boss @ my day job
to accept realities, practicalities / complexities like these.

Yet to this day by and large regardless of the date
when requirements are forced on me, day in day out,
they force me, to choose to ignore (long term) my experience,
best practices or ... accept termination.

too downtrodden to even want to even try
to keep looking anymore (in a day job;
internal distribution/consumption).

as for consulting well, rest i talk to simply don't understand
the license they distribute and if explained don't agree,
as a consequence violate the license by and large
as standard operation procedure and expect me to agree to this practice.
half of that number simply fail to pay for the services as agreed upon for
reasons unknown and outside our control before/after delivery.

i wish i had made different choices in life :\ somehow (along the way)
i went from trying to avoid bullies by 'doing computers' to working for them.

<i>//kracker

http://www.youtube.com/watch?v=q77oJSOSiCs (* Ricter / X verses)</i>

Member since: 2001.07.13 || http://ezpedia.se7enx.com/