Web Wiz - Green Windows Web Hosting

  New Posts New Posts RSS Feed - Javascript problems with WWF newest forum release
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Javascript problems with WWF newest forum release

 Post Reply Post Reply
Author
madpakke View Drop Down
Groupie
Groupie


Joined: 09 June 2009
Status: Offline
Points: 165
Post Options Post Options   Thanks (0) Thanks(0)   Quote madpakke Quote  Post ReplyReply Direct Link To This Post Topic: Javascript problems with WWF newest forum release
    Posted: 24 November 2010 at 4:25pm
Hey Bruce / Web Wiz Forum,
 
On my forum ive got some problems with some url links in threads.
 
Exampel:
 
In the answer from Vimse in that Thread, you can see this link:
 
Then you press is, it pop up with a failed screen and this url:
javascript:if%20%28confirm%28This%20link%20will%20take%20you%20to%20the%20URL%20http://www.datz.de/DATZ-Plus/DATZ-kompakt/L-Nummern-sch%26%23111;%20-%20is%20that%20something%20you%20want%20to%20do?%29%29%20document.location=http://www.datz.de/DATZ-Plus/DATZ-kompakt/L-Nummern-scho;
 
But if you copy paste the url into a new browser, it opens fine..
 
So am woundering if there is a bug in the WWF script or what can i do here.?
Its not the first link in theads at my forum, where we get this error..
 
Hope you guys can help me out here.
 
André
Back to Top
WebWiz-Bruce View Drop Down
Admin Group
Admin Group
Avatar
Web Wiz Developer

Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
Post Options Post Options   Thanks (0) Thanks(0)   Quote WebWiz-Bruce Quote  Post ReplyReply Direct Link To This Post Posted: 24 November 2010 at 4:40pm
It looks like the link that has been copied and pasted across contains javascript.

As javascript within a link can be used to hack both the forum, the members account, or computer to do things such as XSS , XSRF luaching malware, etc. There are security filters within the forum that will strip out this type of code from within links, but if the hidden code is complex you may end up with an unusable link,

The person copy and pasting the link should use the 'Insert Hyperlink' button on the editor toolbar to add the link that way thus inserting a 'clean' link and not one that has javascript and other hidden code that could be malcious.
Back to Top
madpakke View Drop Down
Groupie
Groupie


Joined: 09 June 2009
Status: Offline
Points: 165
Post Options Post Options   Thanks (0) Thanks(0)   Quote madpakke Quote  Post ReplyReply Direct Link To This Post Posted: 24 November 2010 at 8:03pm
Ahh okey Bruce,, thanks for the fast answer and the solution. Thumbs Up
Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.


Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.