Is it safe to use Tiny MCE with registered users with AdsManager classified ads - Joomla! Forum - community, help and support

-

i’m working on classified ads site, registered users can post descriptions products or services. created using joomla , adsmanager. safe use tiny mce registered users descriptions or should use simple textarea instead? example don't want users hack website through it. registered users see , use tiny mce.
if tiny mce safe, html elements should banned, , other security related things should applied? thank you!

you go global configuration -> text filters set filters each user group, independent of editor.

the default registered users not allow html. if want allow html safe suggest use 'whitelist' setting, , allow basic html tags such p, list tags, headings etc. should reasonably safe.

then should not problem use tinymce. can edit plugin settings create custom button set registered users.





Comments

Post a Comment

Popular posts from this blog

Falang and too many redirects - Joomla! Forum - community, help and support

-
hello i don't know if i'm posting in right place , i'm apologise have searched solution long time , couldn't find . my problem starts when have install component falang (translation component ). after time decided uninstall , problem starts. go extension tab meny in left column press manage button, list on right found falang component , delete it, when did website not accessible did stupidest thing install falang package file 1 more time , here problem, when trying open website message showing: "website redirected many times. try clearing cookies. err_too_many_redirects" i have cleared cookies didn't help. have used tool "header checker tool" , result "301 moved permanently " please because don't know do. thank you setka Board index Joomla! 3.x - Ask Support Questions Here Extensions for Joomla! 3.x
Read more

Infinite loop detected in JErrorInfinite loop detected in JError - Joomla! Forum - community, help and support

-
after migrating site new server see error below infinite loop detected in jerrorinfinite loop detected in jerror please can me it means there mis-configuration configuration.php file. can refer post - viewtopic.php?t=830509 https://docs.joomla.org/infinite_loop_d ... joomla_1.7 Board index Joomla! 3.x - Ask Support Questions Here General Questions/New to Joomla! 3.x
Read more

logged out from joomla! - Joomla! Forum - community, help and support

-
Image
good morning you! since joomla! version still running on 3.7.5, trying update current version 23.8.1. tried, got white page due incompatibility 1 of extension (page builder pro). decided first upgrade extension, , trying again. tried update, received error message of dublicated tables. went phpmyadmin , deleted these tables manually. same error appeared again, when tried update part. extension. in order rid of extension, tried remove extension via extension manager. hit "remove" button, got logged out. while trying log admin, got message: you not have access administrator section of site. . yes, changed _user table in phpmyadmin, , checked configuration.php, i'm still not able lock admin. however, checked , browsed internet solution, couldn't find hint, excepted, had similar issue , asked post output of "forum assistant". have no idea if narrow problem, @ least gotta try! of appreciated! thank in advance! part i: forum post assistant (v1.3.5) : 2nd november ...
Read more