UBB.threads PHP Forum Software Community Forums General Suggestions and Feedback To load a web page within a post

Hi - I think I may have posted this earlier in the wrong section (Poll - Your top feature you want for 7.5) and as far as I am aware presently its not possible to load a web page into your post, but is this something which is possible, if so I would dearly like to see this feature to be part of UBB.threads.

P.S: I am not sure if there would be any performance issues that would be of great concern, even so I think a restricted implementation by only allowing the admin or the person who starts the thread may be an idea.

Any thoughts ......most welcome

If you have HTML enabled could you use embed or iframe tags?

Or you could make custom ubb tags for it.

If you would make custom tags and allow users to load a web page within a post you might as well just turn on HTML in posting for everyone. If someone wanted to execute some bad code an they were not allowed to do it as HTML is off but you are able to pull in a web page using an IFRAME tag then they would do it that way.

Years ago this was used to execute a javascript code in a community and used to grab the Host's user names and passcodes, it worked very well and caused big problems in that community as the grabbed data was sent off to a perl program running in a different location on the internet.

I'm assuming when you say by grabbing the host's user name and pass codes - thats for the web server where the web site lives, but why not just implement a browser functionality. So just as a browser loads a page why would there be any problems ( do you mean performance issues ), I guess I'm not clear on the latter part of your statement. But don't we load pages without difficulty in our browser window - and isn't it possible to replicate that.

No, I think you have missed the point of the post.

If I wrote a script in javascript and placed it in a web post and the user loaded the web post in his or her browser it would run in that post like it was taken from that site.

Now you can not read cookies across web domains but if added to a post on that web domain you can use a hidden javascript to read the viewers user name and pass code from that domain name. Then if that script sent that information without you knowing it to another place that just logged all that information for future retrieval by someone that implanted the script they can use your log in information to be you.

Allowing users to load web pages into a forum like this is a disaster waiting to happen. Also the use of HTML in a web forum is also a disaster waiting to happen for many more reasons.

Not everyone out there is honest and or trustworthy. Give them a change to do harm to your site or board and they will take it if they are that type of person. I guarantee it. It is your site, do what you want. But if you do and someone is evil enough to take advantage of you and your allowing HTML or web pages in posts and your site is hijacked please don't come back and give the expression you were "hacked".

^ thanks, point taken

though it would be ok for an ADMIN or a trusted set of people belonging to a 'Group' could be given permissions - would work if I understand you correctly and am not mistaken.

Right, Your understanding me correctly.