External image in text block

Author Message

Radek Kuchta

Wednesday 03 October 2007 5:54:56 am

Hi all,

I woluld like to allow all registered users use external images (in forum). Usually they are using [img] & [/img] tags. Is there a way for that?

http://ez.no/certification/verify/272582

Radek Kuchta

Monday 22 October 2007 4:08:17 am

Guys, any suggestion on how to implement my idea?

http://ez.no/certification/verify/272582

Helle Andersen

Wednesday 12 August 2009 2:12:07 am

Just use the literal tag and insert ordinary html code. This will produce something like:

<literal class='html'>
<p><a href='http://co2now.org'><img src='http://co2now.org/images/stories/widgets/co2_widget_charney_130.png' alt="Current CO2 concentration in the atmosphere" width="130" height="130" border="0" /></a></p>
</literal>

André R.

Wednesday 12 August 2009 2:27:25 am

Unless you trust ALL your forum users, you should never allow them to use literal.html..
This opens the door for all sorts of security breaches, session hijacking, click jacking, CSRF, XSS and so on..
Allowing people to link to external images is almost just as insecure(vulnerable to CSRF at least), so maybe consider adding a image attribute instead? (so they have to upload it, and only valid images are accepted)

eZ Online Editor 5: http://projects.ez.no/ezoe || eZJSCore (Ajax): http://projects.ez.no/ezjscore || eZ Publish EE http://ez.no/eZPublish/eZ-Publish-Enterprise-Subscription
@: http://twitter.com/andrerom

kracker (the)

Wednesday 12 August 2009 4:05:03 am

@ André R.

Great post! Simply inspiring statement.
I wish I could ...

If only I could get my boss @ my day job
to accept realities, practicalities / complexities like these.

Yet to this day by and large regardless of the date
when requirements are forced on me, day in day out,
they force me, to choose to ignore (long term) my experience,
best practices or ... accept termination.

too downtrodden to even want to even try
to keep looking anymore (in a day job;
internal distribution/consumption).

as for consulting well, rest i talk to simply don't understand
the license they distribute and if explained don't agree,
as a consequence violate the license by and large
as standard operation procedure and expect me to agree to this practice.
half of that number simply fail to pay for the services as agreed upon for
reasons unknown and outside our control before/after delivery.

i wish i had made different choices in life :\ somehow (along the way)
i went from trying to avoid bullies by 'doing computers' to working for them.

<i>//kracker

http://www.youtube.com/watch?v=q77oJSOSiCs (* Ricter / X verses)</i>

Member since: 2001.07.13 || http://ezpedia.se7enx.com/

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.

eZ debug

Timing: Jan 19 2025 09:41:08
Script start
Timing: Jan 19 2025 09:41:08
Module start 'layout'
Timing: Jan 19 2025 09:41:08
Module start 'content'
Timing: Jan 19 2025 09:41:09
Module end 'content'
Timing: Jan 19 2025 09:41:09
Script end

Main resources:

Total runtime1.4977 sec
Peak memory usage4,096.0000 KB
Database Queries67

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0051 589.1563152.6250
Module start 'layout' 0.00510.0038 741.781339.4453
Module start 'content' 0.00891.4877 781.2266653.4688
Module end 'content' 1.49660.0011 1,434.695316.1641
Script end 1.4977  1,450.8594 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.00320.2119160.0002
Check MTime0.00130.0862160.0001
Mysql Total
Database connection0.00050.035910.0005
Mysqli_queries1.432595.6453670.0214
Looping result0.00080.0556650.0000
Template Total1.458597.420.7293
Template load0.00250.169320.0013
Template processing1.456097.216220.7280
Template load and register function0.00010.008810.0001
states
state_id_array0.00210.138610.0021
state_identifier_array0.00120.080120.0006
Override
Cache load0.00220.1498410.0001
Sytem overhead
Fetch class attribute can translate value0.00070.047440.0002
Fetch class attribute name0.00190.124180.0002
XML
Image XML parsing0.00360.242240.0009
class_abstraction
Instantiating content class attribute0.00000.001390.0000
General
dbfile0.00290.1946310.0001
String conversion0.00000.000740.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1node/view/full.tplfull/forum_topic.tplextension/sevenx/design/simple/override/templates/full/forum_topic.tplEdit templateOverride template
4content/datatype/view/ezimage.tpl<No override>extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tplEdit templateOverride template
5content/datatype/view/ezxmltext.tpl<No override>extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tplEdit templateOverride template
11content/datatype/view/ezxmltags/paragraph.tpl<No override>extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tplEdit templateOverride template
1content/datatype/view/ezxmltags/literal.tpl<No override>extension/community/design/standard/templates/content/datatype/view/ezxmltags/literal.tplEdit templateOverride template
7content/datatype/view/ezxmltags/line.tpl<No override>design/standard/templates/content/datatype/view/ezxmltags/line.tplEdit templateOverride template
1print_pagelayout.tpl<No override>extension/community/design/community/templates/print_pagelayout.tplEdit templateOverride template
 Number of times templates used: 30
 Number of unique templates used: 7

Time used to render debug report: 0.0001 secs