Forums / Setup & design / External image in text block

External image in text block

Author Message

Radek Kuchta

Wednesday 03 October 2007 5:54:56 am

Hi all,

I woluld like to allow all registered users use external images (in forum). Usually they are using [img] & [/img] tags. Is there a way for that?

http://ez.no/certification/verify/272582

Radek Kuchta

Monday 22 October 2007 4:08:17 am

Guys, any suggestion on how to implement my idea?

http://ez.no/certification/verify/272582

Helle Andersen

Wednesday 12 August 2009 2:12:07 am

Just use the literal tag and insert ordinary html code. This will produce something like:

<literal class='html'>
<p><a href='http://co2now.org'><img src='http://co2now.org/images/stories/widgets/co2_widget_charney_130.png' alt="Current CO2 concentration in the atmosphere" width="130" height="130" border="0" /></a></p>
</literal>

André R.

Wednesday 12 August 2009 2:27:25 am

Unless you trust ALL your forum users, you should never allow them to use literal.html..
This opens the door for all sorts of security breaches, session hijacking, click jacking, CSRF, XSS and so on..
Allowing people to link to external images is almost just as insecure(vulnerable to CSRF at least), so maybe consider adding a image attribute instead? (so they have to upload it, and only valid images are accepted)

eZ Online Editor 5: http://projects.ez.no/ezoe || eZJSCore (Ajax): http://projects.ez.no/ezjscore || eZ Publish EE http://ez.no/eZPublish/eZ-Publish-Enterprise-Subscription
@: http://twitter.com/andrerom

kracker (the)

Wednesday 12 August 2009 4:05:03 am

@ André R.

Great post! Simply inspiring statement.
I wish I could ...

If only I could get my boss @ my day job
to accept realities, practicalities / complexities like these.

Yet to this day by and large regardless of the date
when requirements are forced on me, day in day out,
they force me, to choose to ignore (long term) my experience,
best practices or ... accept termination.

too downtrodden to even want to even try
to keep looking anymore (in a day job;
internal distribution/consumption).

as for consulting well, rest i talk to simply don't understand
the license they distribute and if explained don't agree,
as a consequence violate the license by and large
as standard operation procedure and expect me to agree to this practice.
half of that number simply fail to pay for the services as agreed upon for
reasons unknown and outside our control before/after delivery.

i wish i had made different choices in life :\ somehow (along the way)
i went from trying to avoid bullies by 'doing computers' to working for them.

<i>//kracker

http://www.youtube.com/watch?v=q77oJSOSiCs (* Ricter / X verses)</i>

Member since: 2001.07.13 || http://ezpedia.se7enx.com/

eZ debug

Timing: Jan 20 2025 01:06:33
Script start
Timing: Jan 20 2025 01:06:33
Module start 'content'
Timing: Jan 20 2025 01:06:33
Module end 'content'
Timing: Jan 20 2025 01:06:33
Script end

Main resources:

Total runtime0.1495 sec
Peak memory usage2,048.0000 KB
Database Queries141

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0057 588.9531180.8359
Module start 'content' 0.00580.0067 769.789197.9922
Module end 'content' 0.01240.1369 867.7813525.7734
Script end 0.1493  1,393.5547 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.00362.4314200.0002
Check MTime0.00171.1104200.0001
Mysql Total
Database connection0.00080.543310.0008
Mysqli_queries0.101467.82881410.0007
Looping result0.00130.85171390.0000
Template Total0.136391.210.1363
Template load0.00100.660310.0010
Template processing0.135390.541610.1353
Override
Cache load0.00070.445710.0007
Sytem overhead
Fetch class attribute can translate value0.00090.630910.0009
XML
Image XML parsing0.00030.190010.0003
General
dbfile0.00664.3926200.0003
String conversion0.00000.003530.0000
Note: percentages do not add up to 100% because some accumulators overlap

CSS/JS files loaded with "ezjscPacker" during request:

CacheTypePacklevelSourceFiles
CSS0extension/community/design/community/stylesheets/ext/jquery.autocomplete.css
extension/community_design/design/suncana/stylesheets/scrollbars.css
extension/community_design/design/suncana/stylesheets/tabs.css
extension/community_design/design/suncana/stylesheets/roadmap.css
extension/community_design/design/suncana/stylesheets/content.css
extension/community_design/design/suncana/stylesheets/star-rating.css
extension/community_design/design/suncana/stylesheets/syntax_and_custom_tags.css
extension/community_design/design/suncana/stylesheets/buttons.css
extension/community_design/design/suncana/stylesheets/tweetbox.css
extension/community_design/design/suncana/stylesheets/jquery.fancybox-1.3.4.css
extension/bcsmoothgallery/design/standard/stylesheets/magnific-popup.css
extension/sevenx/design/simple/stylesheets/star_rating.css
extension/sevenx/design/simple/stylesheets/libs/fontawesome/css/all.min.css
extension/sevenx/design/simple/stylesheets/main.v02.css
extension/sevenx/design/simple/stylesheets/main.v02.res.css
JS0extension/ezjscore/design/standard/lib/yui/3.17.2/build/yui/yui-min.js
extension/ezjscore/design/standard/javascript/jquery-3.7.0.min.js
extension/community_design/design/suncana/javascript/jquery.ui.core.min.js
extension/community_design/design/suncana/javascript/jquery.ui.widget.min.js
extension/community_design/design/suncana/javascript/jquery.easing.1.3.js
extension/community_design/design/suncana/javascript/jquery.ui.tabs.js
extension/community_design/design/suncana/javascript/jquery.hoverIntent.min.js
extension/community_design/design/suncana/javascript/jquery.popmenu.js
extension/community_design/design/suncana/javascript/jScrollPane.js
extension/community_design/design/suncana/javascript/jquery.mousewheel.js
extension/community_design/design/suncana/javascript/jquery.cycle.all.js
extension/sevenx/design/simple/javascript/jquery.scrollTo.js
extension/community_design/design/suncana/javascript/jquery.cookie.js
extension/community_design/design/suncana/javascript/ezstarrating_jquery.js
extension/community_design/design/suncana/javascript/jquery.initboxes.js
extension/community_design/design/suncana/javascript/app.js
extension/community_design/design/suncana/javascript/twitterwidget.js
extension/community_design/design/suncana/javascript/community.js
extension/community_design/design/suncana/javascript/roadmap.js
extension/community_design/design/suncana/javascript/ez.js
extension/community_design/design/suncana/javascript/ezshareevents.js
extension/sevenx/design/simple/javascript/main.js

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1pagelayout.tpl<No override>extension/sevenx/design/simple/templates/pagelayout.tplEdit templateOverride template
 Number of times templates used: 1
 Number of unique templates used: 1

Time used to render debug report: 0.0002 secs