I recall at some point in time reading something that recommended not giving all users the ability to post or PM using html because of a security threat. Is that currently an issue?

i never enable HTML, except for me the admin.. and by that, i don't mean the admin group either..

i create a 'can use html' group and usually 1 or 2 peeps are in it.

it's not so much a security risk like before, but it isn't really needed either because with custom BBcodes, you can silence those who 'need to be able to post {insert special thingie here}'

all in all, i do it to both prevent n00b html'ers from jacking up the board as well as peace of mind security wise..

:2c: