Page 1 of 1

CMS w/ MySpace-like user editable profile w/ CSS/HTML?

Posted: Thu Mar 16, 2006 11:08 am
by fecophobia
Is there a module for a content management system or any kind of web software that has support for user's putting CSS tag edits and HTML code into their profile responses? If not, what do you think would be the best CMS to use as a development platform for a social networking website with this feature?

I read a reference to a Durpal module that seemed to say that it would not only do this (profiles w/ HTML/CSS), it would somehow also interpret a user's PHP code as well; but the reference wasn't clear and I can't find the module. If allowing user's to insert HTML is dangerous for security then giving them access to PHP would really be a can of worms. I am intimidated in approaching this project by my lack of knowledge of what sort of security issues HTML & CSS user editing would introduce. I suppose Wikis have to deal with somewhat similar issues.

Posted: Thu Mar 16, 2006 12:08 pm
by a94060
u can use the stip_tags inorder to strip all unnecessary characters except for the characters you want to allow.

Posted: Thu Mar 16, 2006 12:26 pm
by fecophobia
That is the opposite of what I ment.

Posted: Thu Mar 16, 2006 2:50 pm
by a94060
ok,im lost,ill let soemone else solve it.

Posted: Thu Mar 16, 2006 3:03 pm
by fecophobia
Well, at 14 I'm surprised you were able to understand it well enough to reverse the meaning. What are you designing?

Posted: Thu Mar 16, 2006 3:39 pm
by LiveFree
Actually,

a94060 was onto something there .. some tags will competly screw up your layout such as <head> and <div>, but some tags are acceptable such as <b> and <img> and <a>

Just use

Code: Select all

strip_tags($string,'<b></b><p></p><br />');
etc

Posted: Thu Mar 16, 2006 3:47 pm
by a94060
fecophobia wrote:Well, at 14 I'm surprised you were able to understand it well enough to reverse the meaning. What are you designing?
yea!!! thanks. Thats what i meant,i jsut had forgotten the syntax,at least i was onto it with the strip tags. Well,as of now,i will think of what to design on once i have a layout. i have big problems with designing. id lvoe to help with any projects anyone is doing that requires mysql and PHP:)

Actually,

a94060 was onto something there .. some tags will competly screw up your layout such as <head> and <div>, but some tags are acceptable such as <b> and <img> and <a>

Just use

PHP:
strip_tags($string,'<b></b><p></p><br />');


etc
where the b and everything is,just add the tags that you would like to allow over there. if you also want to allow php(opens new door of possiblities,there is another funstion which allows that) that migh also add security issues to your server.

Posted: Thu Mar 16, 2006 3:53 pm
by fecophobia
Well, I'm more concerned about security than ease of use. I doubt MySpace.com strips the input. Their security has more to do with hiding other aspects of the page, such as the iFrame of the advertisement.

Posted: Thu Mar 16, 2006 3:54 pm
by a94060
i use myspace.it does not seem that they strip your input,they just disable the features of them (im not really sure,as i only use code they allow.:))