[Matt]

Originally Posted by khile

ok you caught me I have taken over development of ekinboard bought a few months back and have invested a lot of time into this as far as design goes I had that made by the origanal skiner of ekinboard for $ 200 I now see I have been ripped off to whitch he has not responded to any email.

Also ekinboard is now closed as jew to its bad reputation I thought best to start a fresh so to speak and renamed board witch was part of sale agreement. That's why code will look simulate but if you look mine is far moreadvanced noe with intire re-writes of files

ekinboard is not closed, v2 is on its way!
ekinboard - Coming Soon!
well, im not telling you to give up, but you really should.

[khile]

LOL thats said that since 2006 when I aproched owner to buy for said all last year and I garente it will say that till 23 of September this year (when ekinboard domain expires)

[RobertK]

Matt, it wouldn't be so bad if you weren't so hostile about this. I didn't think khile was laying down all his cards, and I was right. Besides, that "v2 coming" was put there May of last year. Don't you think it'd be updated by now with a link to the blog, and the tour page otherwise?

Well khile, best of luck turning Ekinboard into something worthwhile. Maybe it'll be efficient this time.

[lesP]

It sounds very interesting. I would very much like to help. I will PM you my MSN.

[wGEric]

PHP Code:

if (eregi('http://', $message)){
    $message = preg_replace("#\[url\](.*?)\[/url\]#is", '<a href="\\1" target=_blank>\\1</a>', $message);
    $message = preg_replace("#\[url=$any\]$any\[/url\]#is", "<a href=\"\\1\" target=_blank>\\2</a>", $message);
} else {
    $message = preg_replace("#\[url\](.*?)\[/url\]#is", '<a href="http://\\1" target=_blank>\\1</a>', $message);
    $message = preg_replace("#\[url=$any\]$any\[/url\]#is", "<a href=\"http://\\1\" target=_blank>\\2</a>", $message);
} 


You've got some XSS there. Probably in some of the other areas of your BBCode as well. Couldn't tell you without some testing though.

[khile]

Could use some expert knolage for some reason when i add an outside WYSIWUG editor the message is not posted i have gone all over code and can not see the problem

[Village Idiot]

You shouldn't be using a WYSIWYG editor.

[khile]

sorry not a wysiwug its a bbcode script its this script jTagEditor