is it safe to allow users using a html text editor? i got open source java script based HTML editor and i am using it to allow people to type their blog and forum?
is it safe?
is it safe?
-
-
If you use the proper precautions.
And it's probably safe to assume that because it's an open source editor, there'll be some safety features within it.
Couldn't say without looking at it.
And what does php have to do with it, if you're using javascript? -
thanks markus :)
actually, i am bit worried becuase people can upload HTML files in the editor and PHP script outputting the page. Like..
$text = <html content is stored in database>
and a PHP file like show.php echoing the $text.Comment
-
Well, if that's what you allow people to do, then there's nothing you can do to stop people.
They will be unable to do such things as mysql injection, though.Comment
Comment