Shoutbox

Can someone? I love html!(cause i'm good)

---

Oh, i didn't see that it's disabled everywhere , still, my point is the same. Can anyone tell me y though?

....
....
....


Come on, if you're good at it you'll know that you'd be able to do some annoying things.

Because its not necessary and it brings problems of exploits to the forums.  Plus I don't think I've ever been to a big forum where it is enabled

kk, i just wanted to know

you can use bbcode though, so you can have bold italic underline and the lot.

<script>alert ('woowowowowow')</script>

...

Well yea, it would have some security issues afaik.

Most forums don't have it activated, and thats for a reason, it could also be incredibly annoying to see marquee going around and stuff...

as saralk said, use mybb code... for help on that go here:

http://shoutbox.menthix.net/misc.php?action=help&hid=8

pfft, not gonna happen.

but just using the str_Replace regexp would remove any explotable tags.

then you could just use the noob code like <a href='www.google.com> Clikkie okz </a> or <img src='imorsm.gif'>

but as saralk explained, you can do all this with bbcode.

or just striptags($post, '<a>, <img>');

striptags() is crap... good for simple sites where security isn't important, but there are several easy methods of abusing it.

while($code == strip_tags($code, ...)
$code == strip_tags($code, ...);

This should be safe enough at a first spot. Can't think a workaround to it atm.

However... who actually cares?