https://forums.webwiz.net/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Mon, 06 Apr 2026 10:25:30 +0000 Mon, 05 Nov 2007 08:59:12 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.08 360 https://forums.webwiz.net/RSS_post_feed.asp?TID=24750 https://forums.webwiz.net/forum_images/web_wiz_forums.png https://forums.webwiz.net/ https://forums.webwiz.net/signature-problem_topic24750_post128964.html#128964 Author: WebWiz-Bruce
Subject: 24750
Posted: 05 November 2007 at 8:59am

Images can be placed into signatures using BBcodes.

Often these types of images that display a users IP address are actually .php, .asp, etc files or use a querystring on the end of the image link for them to work.

This type of thing can be manipulated very easily into an XSS hack which a hacker can use to hack your forum, and in some extreme cases may even deface or delete your entire site!

For this reason this type of image would be stripped by the security filters in Web Wiz Forums.

PhpBB is well known for security vulnerabilities, and I would imagine in newer versions you will find that these types of images would also be blocked, if not then you are asking for trouble.

I think that most users would rather have a secure board then to wake up one morning to find that there site has been replaced with some hackers banner proclaiming their site has been hacked.
]]> Mon, 05 Nov 2007 08:59:12 +0000 https://forums.webwiz.net/signature-problem_topic24750_post128964.html#128964 https://forums.webwiz.net/signature-problem_topic24750_post128945.html#128945 Author: true_king
Subject: 24750
Posted: 05 November 2007 at 1:48am

I see a signature code that show ip address of user and his os in a image. but web wiz signature it not work, it showing the code. but in chip-india.com they use phpBB it shows. maybe webwiz not show html signature.

how to enable signature in html?
]]> Mon, 05 Nov 2007 01:48:18 +0000 https://forums.webwiz.net/signature-problem_topic24750_post128945.html#128945