User(s) Viewing This Thread: 1 Guest(s)
[ Tags: about | userfields ]
[MyBB] About userfields
|
10-30-2009, 10:21 PM
Post: #1
|
||||
|
||||
[MyBB] About userfields
I want to ask about Custom Profile Fields. I have a default custom profile fields. It is fid1 (Location) field. And I use {$userfields['fid1']} to display this field value. I fill a simple javascript code in the field via usercp: Code: <script type="text/javascript"> And the result is: Example Script. So, I think {$userfields['fidx']} will render the script that filled in the custom user fields. It doesn't happen with {$profilefields}. So, is it secure if we use {$userfields['fidx']} code in member profile page? |
||||
10-30-2009, 10:32 PM
Post: #2
|
||||
|
||||
RE: [MyBB] About userfields
Don't know if script-tags are allowed in Custom Profile Fields ( can cause troubles? if someone fills in a bad script ), could be they're filtered out by MyBB, but its secure to use {$userfields['fidX']} in the memberprofile.
Test Signature |
||||
10-30-2009, 10:39 PM
(This post was last modified: 10-30-2009 10:50 PM by RateU .)
Post: #3
|
||||
|
||||
RE: [MyBB] About userfields
(10-30-2009 10:32 PM)LeX- Wrote: but its secure to use {$userfields['fidX']} in the memberprofile. Thank you very much, LeX-. I'm very happy to hear that. Because when i try to use the other tag in the field, img tag, {$userfields['fidx']} show the images. The {$profilefields} will not render any script in the fields. This makes me worry if a member put a bad script there. But now, I don't worry anymore. |
||||
« Next Oldest | Next Newest »
|
[ Tags: about | userfields ]
|