allowing iframes is a pretty big security risk in the forum… keep in mind that anyone who can post, can add an iframe and is a potential XSS issue…  and not really sure why you need one – can you elaborate?  the most common is for video posting but with wp oembed, they are not needed…  but, if really needed and you trust all posters on your site, we can give you a filter that allows it to happen… just want to check use case and make sure you understand risk first…

Ah OK well I will not allow iFrames then, so no worries there.

I was basically just stumped as to why I couldn’t post a video. I tried inserting a link to a vimeo video but I kept getting the “no iframes” error message.

I wasn’t aware of wp oembed – is it simple and easy for my users to post videos using that method?

with wp oembed, all you do is paste in the url to the video.. boom, it handles everything else… the provider of course must support the oembed standard (its not a wp thing) and all the big ones do…

…and while we quite seriously do not recommend it it is possible to turn iframes on posts – which Steve seems to have forgotten! It was added as a permission that can be turned on but it really is at your own risk. Using the oembed technique is far, far more secure.

Sounds great – thanks a lot for the prompt assistance!

forgotten? nah, even alluded to it… but wanted to make sure the risks were understood first…

forgotten? nah, even alluded to it… but wanted to make sure the risks were understood first…