Home  |  About  | Last |  Submit  |  Contact
AllQuests.com




Previous Question:  Do subwoofer player lower than expected  SubwoofersNext Question:  Xbox 360 v2 question  Xbox 360 Hardware
Question CMS w MySpace like user editable profile w CSS HTML ( SitePoint Forums Web Security )
Updated: 2008-08-12 05:50:11 (2)
CMS w MySpace like user editable profile w CSS HTML

Is there a module for a content management system or any kind of web software that has support for user's putting CSS tag edits and HTML code into their profile responses? If not, what do you think would be the best CMS to use as a development platform for a social networking website with this feature?

I read a reference to a Durpal module that seemed to say that it would not only do this (profiles w/ HTML/CSS), it would somehow also interpret a user's PHP code as well; but the reference wasn't clear and I can't find the module. If allowing user's to insert HTML is dangerous for security then giving them access to PHP would really be a can of worms. I am intimidated in approaching this project by my lack of knowledge of what sort of security issues HTML & CSS user editing would introduce. I suppose Wikis have to deal with somewhat similar issues.

Answers: CMS w MySpace like user editable profile w CSS HTML ( SitePoint Forums Web Security )
CMS w MySpace like user editable profile w CSS HTML

Wikis use their own code system for text entry.

If you're going to allow HTML in user input, I would suggest a whitelist of allowed tags, for example a, p, em, strong, ul, li, code, blockquote. Don't give full HTML/CSS access because you'll either get exploited easily or your attempts at stopping exploits could quickly turn into a full-time job if your site gets enough traffic..

vgarcia

CMS w MySpace like user editable profile w CSS HTML

That is why I'm hoping that there is a module out there somewhere that takes a stabb at this. There is a host of issues and no one has worked them all out yet. Last night I was looking at a MySpace user who had hacked his profile to obliterate the advertisement at the top of the page. The issues are endless and the undertaking is huge, probably open ended. I'd feel much better if I were part of a community dealing with such a problem, if for example this were part of a popular Drupal module, or some other popular open source CMS.

fecophobia

Previous Question:  Do subwoofer player lower than expected  AVForums  SubwoofersNext Question:  Xbox 360 v2 question  AVForums  Xbox 360 Hardware

- Source: CMS w MySpace like user editable profile w CSS HTML SitePoint Forums Web Security
- Previous Question: Do subwoofer player lower than expected AVForums Subwoofers
- Next Question: Xbox 360 v2 question AVForums Xbox 360 Hardware