TalkPHP
 
 
Account Login
Latest Articles
» The basic usage of PHPTAL, a XML/XHTML template library for PHP
» Vulnerable methods and the areas they are commonly trusted in.
» Simple way to protect a form from bot
» The Basics On: How Session Stealing Works
» How to keep your forms from double posting data
IRC Channel
IRC Speech Bubble Join the friendly bunch on IRC...
(#TalkPHP on Freenode)

...Also available via a web interface.

See this thread for information on the TalkPHP Free Hugs Initiative™. Subject to availability.
Associates
Associates
CSS Tutorials
Reply
 
LinkBack Thread Tools Search this Thread Display Modes
Old 03-05-2008, 09:36 PM   #1 (permalink)
The Acquainted
 
wGEric's Avatar
 
Join Date: Nov 2007
Posts: 166
Thanks: 0
wGEric is on a distinguished road
Default BBCode bugs

Code:
this shouldn't be bold but it is.

this shouldn't be a link
IMO the code tag shouldn't be parsing BBCode within it. I'm not sure if this is standard in vBulletin or not. If it is, then don't worry about it. This makes it hard to post bbcode examples for people and in some cases code can get messed up.


Quote the post to see these. Pretty much when you put bbcodes within the function bbcode it doesn't work.
include" target="_blank">include

test

javascript:alert('test');
Above produces a weird result. Why <b> in the middle? heh. I guess that can prevent an exploit.

test" target="_blank">test

PHP Code:
<?php //some php ?>
" target="_blank">
PHP Code:
<?php //some php ?>


Code:
some code
" target="_blank">
Code:
some code



You get the idea.
__________________
Eric
wGEric is offline  
Reply With Quote
Old 03-05-2008, 10:33 PM   #2 (permalink)
Alan @ CIT
Member of the Month
The Frequenter
Member of the Month Top Contributor 
 
Alan @ CIT's Avatar
 
Join Date: Apr 2005
Location: South UK
Posts: 483
Thanks: 51
Alan @ CIT is on a distinguished road
Default

You've got to love vBulletins BBCode parser

To get around the problem of BBCode in code tags (or anywhere infact), you can use the [noparse][/noparse] tags. Just put your BBCode inside those tags and they won't be parsed.

Alan
Send a message via MSN to Alan @ CIT
Alan @ CIT is offline  
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT. The time now is 06:04 AM.

 
     

Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Inactive Reminders By Icora Web Design