quote:
Originally posted by Ash_
btw WDZ, wheres the runDodgyScript(); comong from
It could be a built-in JavaScript function, or you could type as much code as you want right inside there. I've seen some pretty impressive one-line JavaScripts. It could be used to do a cross-site-scripting attack, or steal login cookies, or some other dodgy stuff.
quote:
Originally posted by Ash_
and if these forums are coded corectly (which im sure they are)
haha... I'm not so sure.
quote:
Originally posted by Ash_
anyway, maybe someone good with using str_replace should code a quick HTML to BBCode, that searches for like <a href='linkage' border='0'> and it ignores the unneeded commands like onClick and border.
str_replace()? preg_replace() is what should be used. Anyway, I don't think that's necessary, and I haven't even begun to think about the possible limitations and side effects.
/ 
