embedde videos
- Thread starter J-Dro
- Start date
MEAN IRISH GUY
Horse-faced space dog
i dont think it does. i tried to do it once just like i do on another board and it wouldnt work. just kinda put a link instead.
We can turn it on, but currently it's off. We need to discuss internally to see if that opens up a security hole or not.
walter
Fourth Party
Does this fall into the same catagory as opening the gallery again? Security wise?
warcricket
Like a Jerk
oh, is that why the gallery has been down forever?
I don't recall. It may be a blanket security switch that basically turns on something else - we'll have to discuss internally and figure out exactly what it means.
The gallery was how the hackers got in last time. It was an add-on that was very old and not remotely up to snuff.
<object width="425" height="344"><param name="movie" value="http://www.youtube.com/v/J9BUg9Re5u8&hl=en&fs=1"></param><param name="allowFullScreen" value="true"></param><param name="allowscriptaccess" value="always"></param><embed src="http://www.youtube.com/v/J9BUg9Re5u8&hl=en&fs=1" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="425" height="344"></embed></object>
J-Dro
Well-Known Member
Yeah I tried that yesterday too before I asked the question. It would be a really cool feature to add to the forum but I don't want to start another jihad.
It was the gallery, not HTML, that caused the last one. The gallery was uber old and basically allowed you do to this:
* upload php script
* run php script
Why the execute permissions were not tighter is beyond me. But it was probably more or less an alpha-level gallery add-on that people used in good faith.
IMO the real downside is that I've seen boards with HTML turned on take on a circus feel after a while.
The board of directors is discussing it. We'll let you know what happens.