Post by Peter on Oct 25, 2005 13:36:08 GMT -8
Please read the whole post if you are using codes from here.
This thread really should have been here sooner, but it didn't occur to me until I thought about it just now...
Some codes here come with JavaScript (JS) files that are remotely hosted on the coder's (person who submitted the code) host. Reason for the JS file is because the coder feels that the script is rather long for the header / footer. So it keeps it nice and tidy.
Most coders here are pretty well known, and can be trusted, but there are coders out there who will take advantage of this. When adding a code to your forum which has a JS file included with it, make sure the code was created by a respected well known coder who can be trusted.
Why am I telling you this?
Let's say I created a code but also included a JS file with it and you added it to your forum. Because the JS file is remotely hosted, I can edit it at will. I could include malicious code to do all sorts of things to your members, and your forum. If your members are using Internet Explorer, then this opens a few more doors up for malicious coding, which I won't go into detail.
So when using codes from here, please be careful if they have JS files included with them. If you find all your members deleted, or even your forum deleted (yes it is quite possible), then it is not ProBoards fault. It is your fault for using the code.
If in doubt, don't use any codes that have JS files.
A JS file would look something like...
document.write("<script type='text/javascript' src='JS FILE URL'><\/script>");
That's one example. Another would be using DOM methods. So look for something like this...
var myVar = document.createElement("script");
And sometimes the coder will add it to the the opening script tag, like so...
<script type="text/javascript" src="JS FILE URL">
<!--
// comments here
//-->
</script>
If you really do need to use the code, and you are not sure if the coder can be trusted. You could always save the JS file and upload it to your own host.
If you have any questions, post in the code support board please.
This thread really should have been here sooner, but it didn't occur to me until I thought about it just now...
Some codes here come with JavaScript (JS) files that are remotely hosted on the coder's (person who submitted the code) host. Reason for the JS file is because the coder feels that the script is rather long for the header / footer. So it keeps it nice and tidy.
Most coders here are pretty well known, and can be trusted, but there are coders out there who will take advantage of this. When adding a code to your forum which has a JS file included with it, make sure the code was created by a respected well known coder who can be trusted.
Why am I telling you this?
Let's say I created a code but also included a JS file with it and you added it to your forum. Because the JS file is remotely hosted, I can edit it at will. I could include malicious code to do all sorts of things to your members, and your forum. If your members are using Internet Explorer, then this opens a few more doors up for malicious coding, which I won't go into detail.
So when using codes from here, please be careful if they have JS files included with them. If you find all your members deleted, or even your forum deleted (yes it is quite possible), then it is not ProBoards fault. It is your fault for using the code.
If in doubt, don't use any codes that have JS files.
A JS file would look something like...
document.write("<script type='text/javascript' src='JS FILE URL'><\/script>");
That's one example. Another would be using DOM methods. So look for something like this...
var myVar = document.createElement("script");
And sometimes the coder will add it to the the opening script tag, like so...
<script type="text/javascript" src="JS FILE URL">
<!--
// comments here
//-->
</script>
If you really do need to use the code, and you are not sure if the coder can be trusted. You could always save the JS file and upload it to your own host.
If you have any questions, post in the code support board please.
