Support Forum
Support Forum
Offline
Hello
Version 5.0
I used the WP theme Branford Magazine on my WP installation and it seems to accept iFrames ok. Here is an example page....
http://scotchpotch.com/book-re.....dle-ebook/
You can see that the Amazon link at the bottom works fine. I tried pasting that iFrame code into a Simple:Press post and all it displayed was the code itself, not the graphic and link.
Is there a fix for this?
Thanks
Offline
yes of course... think about that for a minute...
you as site owner, can modify any page template to add an iframe to the theme template file and have it display... or you as admin, or any other user you trust to give author role to on your site, can create an iframe in a post or page...
but in the forum, that would mean anyone who can post, often a guest, could add an iframe and hijack your site or trick users into clicking on things or being routed to malware site by simply including an iframe in their post...
it would be a huge security risk to allow iframes in forum post content... so we strip out iframes...
now, its possible that it could be a new permission or only be for certain usergroups, etc... but its a lot of work and care on the users to make sure you dont leave a security hole open... so at this point, we just flat dont allow them...
general reads of your wp posts/pages cannot add an iframe in a comment, for example...
Visit Cruise Talk Central and Mr Papa's World
Offline
Agree with not allowing anyone to use iFrames.
It would be nice if they were not stripped from the 'Special forum message to be displayed above topics' if they weren't you could create an iFrame ad there.
With the new V5.0 setup its pretty easy to add just about anything anywhere. For example I use InfoLinks. I have it setup to show the link only in the text of a message and never in a menu, header, etc.
Custom Simple Press Themes
Offline
Hi
Many thanks for your prompt response.
Yes, I overlooked the important issue of security when I asked that question.
I was going to move certain WordPress posts to the forum simply by cutting and pasting - without realising the risks it would have exposed had Simple:Press not stripped out the iFrame codes.
Thank you.
Offline
no worries. we may still add a permission some day...
Visit Cruise Talk Central and Mr Papa's World
Offline
It is worth adding however, that there is nothing to prevent you adding an iFrame to the SP theme template itself. This is safe.
 |
YELLOW
SWORDFISH
|
Offline
Thanks again Mr Papa and Yellow Swordfish
I was trying things out last night and since I was logged in admin on my WP blog, I could reply to posts by pasting iFrames, which, as admin is ok.
I then tried reply to a post when I was logged out. I pasted the iFrame code. Of course that didn't work (thankfully).
My only concern is - if users subscribe to my forum to post messages - would that mean they would also be automatically subscribed to my WP blog as well, and be able to use iFrames in their WP posts?
I take it I can limit a subscribers permissions when it comes to posting on WP, I'll check that out too.
Offline
I think to use iframes in wp posts, a user needs unfiltered html permission... by default, I think only admins get that...
Visit Cruise Talk Central and Mr Papa's World
Silver Members
Offline
Why don't you follow WP with allowing admins to post iframes? I feel like I'm missing something.
I'd like to post Amazon product links with posts about recommended products.
Offline
If you havent been following SP closely, we have said that a new permission will be coming in 5.3.1 that allows permissions for users to use iframes...
Visit Cruise Talk Central and Mr Papa's World
All RSS