Hi Everyone,
I'm relatively new to postnuke. I want to post pictures to the website. The pictures are stored on a geocities site, so I would just be linking them. I allowed the IMG HTML tag and its attributes in the settings temporarily to see if it would work. It did not, so I disallowed it again. Is there an alternate way to add pictures to my postnuke site, without using the "img src" command and making personal information accessible by hackers?
Thanks,
dubbemiah
Forum Activity
- Teb answered »PNphpBB2 and menu tree« 04. Jul
- marc@marcpare.com posted »Adding an "About Us" page« 04. Jul
- animateclay answered »SafeHTML output filter and youtube« 04. Jul
- videokid answered »caching« 04. Jul
- Wendell answered »pagesetter pdf output« 04. Jul
- Fredricn posted »Mediashare mysql instalation issue« 04. Jul
- slam answered »Theme by iThinkMedia.com footer - Beacon for Hackers?« 04. Jul
Login
Cannot use pictures in postnuke
-
- Rank: Freshman
- Registered: 12.03.08
- last visit: 21.03.08
- Posts: 2
Posted: 12.03.2008, 18:40
-
- Rank: Team Member
- Registered: 08.12.03
- last visit: 29.06.09
- Posts: 3062
Posted: 12.03.2008, 19:03
The img src is not much to worry about... You have to manage a reasonable level of paranoia and usability. Images are nothing to sweat, they are more of an issue of porn and advertisings and who has the permissions to post...
So try it again.. and give us a URL and/or look at your source code from the browser to sort out potential problems.. It maybe that geocities does not allow 'hot' linking. eg. try it with a different source.
HTH
--
David Pahl
Zikula Support Team -
- Rank: Freshman
- Registered: 20.03.08
- last visit: 30.03.08
- Posts: 4
Posted: 21.03.2008, 02:07
I have the same problem. Even if I use img src, it doesn't give me an error or anything, it just strips out the picture when I make the post. I have tried this on the stories, FAQ, and admin messages modules. I get the same result every time.
I have imagemagick installed, through apt-get. I figured I'd apt-get remove it, and compile it from a tarball, but this didn't work either. I haven't tried linking to local files, as this wouldn't be ideal, because I don't want to give anyone else access to my box. We've been trying to link to images from photobucket albums, which I know are hot linkable.
Is there a module I'm missing, that doesn't come "stock" with postnuke?
The URL to my site is http://www.everquestrejects.com
edited by: per0xide, Mar 21, 2008 - 02:09 AM -
- Rank: Professional
- Registered: 16.09.04
- last visit: 06.04.09
- Posts: 835
Posted: 21.03.2008, 05:10
in the HTML security settings you have it set to allow w/ attributes for img tag? -
- Rank: Freshman
- Registered: 12.03.08
- last visit: 21.03.08
- Posts: 2
Posted: 21.03.2008, 20:20
per0xide
I have the same problem. Even if I use img src, it doesn't give me an error or anything, it just strips out the picture when I make the post. I have tried this on the stories, FAQ, and admin messages modules. I get the same result every time.
I have imagemagick installed, through apt-get. I figured I'd apt-get remove it, and compile it from a tarball, but this didn't work either. I haven't tried linking to local files, as this wouldn't be ideal, because I don't want to give anyone else access to my box. We've been trying to link to images from photobucket albums, which I know are hot linkable.
Is there a module I'm missing, that doesn't come "stock" with postnuke?
The URL to my site is http://www.everquestrejects.comedited by: per0xide, Mar 21, 2008 - 02:09 AM
BTW, I did get images to show up in forums with the commands, which didn't seem to work before. As opposed to using a link outside my website, I uploaded the graphic to my web site, then linked it. I use PNphpBB2, or whatever it's called, and have not used the code anywhere but the forums. However, the forum did stretch the picture to max, even after I used the width and length attributes to scale it down. Those did not work at all, and I did allow IMG use w/ attributes in the Settings...
I will try to use the img src tag sometime soon for our main page in the site, to be sure Postnuke does allow it..
Thanks all for your input and help!
Dubbemiah
-
- Rank: Freshman
- Registered: 20.03.08
- last visit: 30.03.08
- Posts: 4
Posted: 30.03.2008, 02:33
uheweb
in the HTML security settings you have it set to allow w/ attributes for img tag?
Sorry for the late reply, thought I had the "notify me when a reply is posted" box checked, but apparently I didn't.
I have every tag set to enabled right now. I set as a shot in the dark, but forgot to notate which ones were disabled by default. So now i need to put postnuke on my laptop so I can tell which ones to disable.
Any time I attempt to link to a hotlinkable picture on the site, it strips it out. Before I set all of the HTML tags to enable, it would only show the link in raw code. Now it doesn't show the raw code anymore... but it doesn't show the picture either. :/
I haven't tried uploading the pictures to the box and then linking them from there, yet. The thing is, I'm likely not going to be the one posting pictures, that'll be someone else. I don't really want to give someone else access to the box so they can upload pictures.
Thanks for the help :)
edited by: per0xide, Mar 30, 2008 - 02:45 AM -
- Rank: Freshman
- Registered: 20.03.08
- last visit: 30.03.08
- Posts: 4
Posted: 30.03.2008, 02:44
AmmoDump
The img src is not much to worry about... You have to manage a reasonable level of paranoia and usability. Images are nothing to sweat, they are more of an issue of porn and advertisings and who has the permissions to post...
So try it again.. and give us a URL and/or look at your source code from the browser to sort out potential problems.. It maybe that geocities does not allow 'hot' linking. eg. try it with a different source.
HTH
The link to the site is http://www.everquestrejects.com. I posted an example of it not processing the image in the "About" section, which is really just the FAQ module (I haven't yet figured out how to link an HTML page, and keep it from loading up in the same frame, but wiping out the "index").
-
- Rank: Team Member
- Registered: 08.12.03
- last visit: 29.06.09
- Posts: 3062
Posted: 30.03.2008, 04:10
They need to be enabled WITH attributes, not just enabled.
As far as which ones to keep enabled or disabled, iframe, embed, script should be disabled for sure, unless of course you need them.
I am not sure what you mean by frame and index, in respect to htmlpages.
--
David Pahl
Zikula Support Team -
- Rank: Freshman
- Registered: 20.03.08
- last visit: 30.03.08
- Posts: 4
Posted: 30.03.2008, 06:34
AmmoDump
They need to be enabled WITH attributes, not just enabled.
As far as which ones to keep enabled or disabled, iframe, embed, script should be disabled for sure, unless of course you need them.
This worked :) Thanks a lot, I've been trying to figure this out for a while :)
AmmoDump
I am not sure what you mean by frame and index, in respect to htmlpages.
Basically, if I set it to load say, "about.htm" when someone clicks on the "About" link, the about.htm isn't loaded inside of the index. You only see the about.htm, no menu, or banner at the top. I want the about.htm to load as if it were a module.
Thanks :)
Users online
This list is based on the users active over the last 60 minutes.
