it was always disabled for users... hence my post where I pointed out that it would be so easy to abuse that it would be ridiculous to let anyone other than myself have access:
so can someone confirm how they did it? I can't replicate the issue and the permissions are correctly configured.
At the time I tried it last night at about, 12:15am the bbcode worked in my signature. All I had to do was supply an edited .css file that replaced your member id with mine it worked.
We were discussing it in the IRC at the time so unless somebody with access to the bbcode section of the ACP changed something I have no idea why it worked yesterday but not today.
We were discussing it in the IRC at the time so unless somebody with access to the bbcode section of the ACP changed something I have no idea why it worked yesterday but not today.
That's what I'm trying to work out, there's no indication anyone with access did anything (PuyoDead is the only person with access) and from checking through every IRC log it does not seem he was active, but I've sent him a message asking for confirmation... I was sure I configured it properly, so if it is the case that PuyoDead did not modify the setting then uh... IPB must be very broken o.0
The answer is either:
1. I'm an idiot and misconfigured it so that anyone could use the bbcode (even though I'm confident I didn't, I checked before I posted about the bbcode that it was properly restricted because allowing people to embed stylesheets is a massive security issue) and then at around 1am (my time) when someone did use it an administrator (PuyoDead) fixed the permissions.
2. There is a strange IPB bug that allows people to use restricted BBCode under certain conditions...
but if it's 2, why did it stop working at ~1am? The only likely possibility is it's #1, but I can't find any indication PuyoDead was even online at the time or was told about it (no IRC logs) but if it's #2 then... there is a REALLY WEIRD IPB issue.
I'm not sure, it may be appropriate to get rid of the tag altogether until its fixed. There will be a lot of staff-confusion with people running around with that avatar.
I'm not sure, it may be appropriate to get rid of the tag altogether until its fixed. There will be a lot of staff-confusion with people running around with that avatar.
I've modified it to be unusable unless the file is hosted by me, so it's not a concern any more. The concern now is how people were able to use a properly configured tag; we've had other stuff previously that was also restricted that now could have been used.
But this might not be allowed so I'm changing it back.
Dunno how you did that, but it does not work for me.
Unless my sig has to be empty.
Edit: Nope.
Time to quit playing with it anyway.
Goodbye Sidebar!
Ah yes I see now.
I wonder if citric will care about this
Ankenmann2 seems to have seen it.
EDIT:
See <<<
He is the one who explained how to do it in earlier posts. I'm just not sure if he meant the bbcode to work for everyone or not.
I heard off Jefe that you can limit bbcode to certain groups, this is probably is what he is going to do.
It is, is it?
see:
see, doesn't work...
so can someone confirm how they did it? I can't replicate the issue and the permissions are correctly configured.
At the time I tried it last night at about, 12:15am the bbcode worked in my signature. All I had to do was supply an edited .css file that replaced your member id with mine it worked.
We were discussing it in the IRC at the time so unless somebody with access to the bbcode section of the ACP changed something I have no idea why it worked yesterday but not today.
That's what I'm trying to work out, there's no indication anyone with access did anything (PuyoDead is the only person with access) and from checking through every IRC log it does not seem he was active, but I've sent him a message asking for confirmation... I was sure I configured it properly, so if it is the case that PuyoDead did not modify the setting then uh... IPB must be very broken o.0
The answer is either:
1. I'm an idiot and misconfigured it so that anyone could use the bbcode (even though I'm confident I didn't, I checked before I posted about the bbcode that it was properly restricted because allowing people to embed stylesheets is a massive security issue) and then at around 1am (my time) when someone did use it an administrator (PuyoDead) fixed the permissions.
2. There is a strange IPB bug that allows people to use restricted BBCode under certain conditions...
but if it's 2, why did it stop working at ~1am? The only likely possibility is it's #1, but I can't find any indication PuyoDead was even online at the time or was told about it (no IRC logs) but if it's #2 then... there is a REALLY WEIRD IPB issue.
I've modified it to be unusable unless the file is hosted by me, so it's not a concern any more. The concern now is how people were able to use a properly configured tag; we've had other stuff previously that was also restricted that now could have been used.