How to remove html tag restrictions ?

[Voyageur]

Hello,

I try to remove the html tag restrictions in the description field.

In Admin/Option/Setup (Enable html Tag) i select Yes, also i want remove "Allowed html tags" that IndexU accept any html code.

Anyone know how to do this ?

Thanks and sorry for my english

[Bruceper]

For security issues you do NOT want to do that. That could allow users to enter javascript, meta refresh tags, iframes and more to inject code, hijack browsers and be a general nuisance including redirecting users away from your site, installing adware/spyware/scumware, ad replacements and more.

And all of this makes it look like YOUR site is doing this, not someone else's. It would severly damage your reputation and ruin your site.

[Voyageur]

Thanks Bruceper for your reply.

I was wondering that is a security problem allowing allowing all html tags.

In fact, i'm trying to display google script :

<script type="text/javascript"><!--
google_ad_client = "pub-XXXXXXXXXXXXXXXXXX";
/* Lien textuel, créé le 06/04/08 */
google_ad_slot = "XXXXXXXXX";
google_ad_output = "textlink";
google_ad_format = "ref_text";
google_cpa_choice = ""; // on file
//-->
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>

i added <script> tag in allowed html tags but the rest of code disappear, do you know how allow all google html tags ? that's my goal.

Thanks for your help.

[inspireme]

well that makes no sense... why are you letting people paste google adwords code into a description? just add the adwords code into the detail_link.html file...?

[Voyageur]

Hi Inspireme,

I'm not letting people add adwords in description, i want place some targeted ads, about detail page, i don't use it.

[inspireme]

cant you just add it to the rows file then? or the browse.html file? it seems really hard to manage and update if you paste them into the link description....

this maybe of interest :
http://www.indexudirectory.com/blog/...ads-in-middle/