CMS w/ MySpace-like user editable profile w/ CSS/HTML?

PHP programming forum. Ask questions or help people concerning PHP code. Don't understand a function? Need help implementing a class? Don't understand a class? Here is where to ask. Remember to do your homework!

Moderator: General Moderators

Post Reply
fecophobia
Forum Newbie
Posts: 11
Joined: Sun Mar 05, 2006 9:59 pm

CMS w/ MySpace-like user editable profile w/ CSS/HTML?

Post by fecophobia »

Is there a module for a content management system or any kind of web software that has support for user's putting CSS tag edits and HTML code into their profile responses? If not, what do you think would be the best CMS to use as a development platform for a social networking website with this feature?

I read a reference to a Durpal module that seemed to say that it would not only do this (profiles w/ HTML/CSS), it would somehow also interpret a user's PHP code as well; but the reference wasn't clear and I can't find the module. If allowing user's to insert HTML is dangerous for security then giving them access to PHP would really be a can of worms. I am intimidated in approaching this project by my lack of knowledge of what sort of security issues HTML & CSS user editing would introduce. I suppose Wikis have to deal with somewhat similar issues.
User avatar
a94060
Forum Regular
Posts: 543
Joined: Fri Feb 10, 2006 4:53 pm

Post by a94060 »

u can use the stip_tags inorder to strip all unnecessary characters except for the characters you want to allow.
fecophobia
Forum Newbie
Posts: 11
Joined: Sun Mar 05, 2006 9:59 pm

Post by fecophobia »

That is the opposite of what I ment.
User avatar
a94060
Forum Regular
Posts: 543
Joined: Fri Feb 10, 2006 4:53 pm

Post by a94060 »

ok,im lost,ill let soemone else solve it.
fecophobia
Forum Newbie
Posts: 11
Joined: Sun Mar 05, 2006 9:59 pm

Post by fecophobia »

Well, at 14 I'm surprised you were able to understand it well enough to reverse the meaning. What are you designing?
LiveFree
Forum Contributor
Posts: 258
Joined: Tue Dec 06, 2005 5:34 pm
Location: W-Town

Post by LiveFree »

Actually,

a94060 was onto something there .. some tags will competly screw up your layout such as <head> and <div>, but some tags are acceptable such as <b> and <img> and <a>

Just use

Code: Select all

strip_tags($string,'<b></b><p></p><br />');
etc
User avatar
a94060
Forum Regular
Posts: 543
Joined: Fri Feb 10, 2006 4:53 pm

Post by a94060 »

fecophobia wrote:Well, at 14 I'm surprised you were able to understand it well enough to reverse the meaning. What are you designing?
yea!!! thanks. Thats what i meant,i jsut had forgotten the syntax,at least i was onto it with the strip tags. Well,as of now,i will think of what to design on once i have a layout. i have big problems with designing. id lvoe to help with any projects anyone is doing that requires mysql and PHP:)

Actually,

a94060 was onto something there .. some tags will competly screw up your layout such as <head> and <div>, but some tags are acceptable such as <b> and <img> and <a>

Just use

PHP:
strip_tags($string,'<b></b><p></p><br />');


etc
where the b and everything is,just add the tags that you would like to allow over there. if you also want to allow php(opens new door of possiblities,there is another funstion which allows that) that migh also add security issues to your server.
fecophobia
Forum Newbie
Posts: 11
Joined: Sun Mar 05, 2006 9:59 pm

Post by fecophobia »

Well, I'm more concerned about security than ease of use. I doubt MySpace.com strips the input. Their security has more to do with hiding other aspects of the page, such as the iFrame of the advertisement.
User avatar
a94060
Forum Regular
Posts: 543
Joined: Fri Feb 10, 2006 4:53 pm

Post by a94060 »

i use myspace.it does not seem that they strip your input,they just disable the features of them (im not really sure,as i only use code they allow.:))
Post Reply