Results 1 to 3 of 3

Thread: <embed> OK for admin - stripped for user

  1. #1
    User
    Join Date
    06-19-09.
    Posts
    417

    Default <embed> OK for admin - stripped for user

    I have enabled <object>, <param> and <embed> in the global settings.

    When logged in as an admin and enter the following in to an article element everything is fine (code as provided by slideshare.net):

    Code:
    <div id="__ss_1973781" style="width: 425px; text-align: left;">Session 1 Marketing And Marketing Orientation  2009
    <object style="margin:0px" width="425" height="355">
    <param name="movie" value="http://static.slidesharecdn.com/swf/ssplayer2.swf?doc=session1marketingandmarketingorientation2009-090909130947-phpapp01&amp;stripped_title=session-1-marketing-and-marketing-orientation-2009" />
    <param name="allowFullScreen" value="true" />
    <param name="allowScriptAccess" value="always" /><embed type="application/x-shockwave-flash" width="425" height="355" src="http://static.slidesharecdn.com/swf/ssplayer2.swf?doc=session1marketingandmarketingorientation2009-090909130947-phpapp01&amp;stripped_title=session-1-marketing-and-marketing-orientation-2009" allowscriptaccess="always" allowfullscreen="true"></embed>
    </object>
    <div style="font-size: 11px; font-family: tahoma,arial; height: 26px; padding-top: 2px;">View more presentations from Bob Hogg.</div>
    But if I enter the same code as a user the <embed> tag is stripped out, giving the following:

    Code:
    <div id="__ss_1973781" style="text-align: left; width: 425px;">Session 1 Marketing And Marketing Orientation 2009
    <object style="margin: 0px;" width="425" height="355">
    </object>
    <div style="font-family: tahoma, arial; height: 26px; font-size: 11px; padding-top: 2px;">View more presentations from Bob Hogg.</div>
    </div>
    The strange thing is the following code can be entered and is not stripped out:

    Code:
    <embed></embed>[nbsp]</p>
    
    
    <embed width="425" height="355" src="http://static.slidesharecdn.com/swf/ssplayer2.swf?doc=session1marketingandmarketingorientation2009-090909130947-phpapp01[&amp;]stripped_title=session-1-marketing-and-marketing-orientation-2009"></embed></p>
    Any ideas as to how to cure this would be greatly appreciated.

    Thanks,

    Gary.

  2. #2
    User
    Join Date
    06-19-09.
    Posts
    417

    Default Re: <embed> OK for admin - stripped for user

    Bump... this is a real pain :cry: - any help much appreciated.

  3. #3
    User
    Join Date
    06-19-09.
    Posts
    328

    Default Re: <embed> OK for admin - stripped for user

    hi,

    TYPOlight uses the php's function "strip_tags", so check if there are some bug reports against your version at http://bugs.php.net


    p.s.
    a quick google search for "php strip_tags embed" returns some (apparently) related results
    Consulenza Contao CMS https://www.intco.it

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •