Additional user field...disable HTML

[Lucifix]

Okey, I've created new field in 4images_users table called user_aboutme.

The problem is that user can enter any kind of html code in his/her profile settings.

Does anyone have idea how can I disable html or enable only allowed html or BBCODE code?

[Nicky]

hi Lucifix,

quick response

i just tried that in members.php

search for

Code: [Select]

    if (!empty($additional_user_fields)) {
      $additional_field_array = array();
      foreach ($additional_user_fields as $key => $val) {
        $additional_field_array['lang_'.$key] = $val[0];
      }
      if (!empty($additional_field_array)) {
        $site_template->register_vars($additional_field_array);
      }
    }
    $content = $site_template->parse_template("member_profile");

and replace with

Code: [Select]

    if (!empty($additional_user_fields)) {
      $additional_field_array = array();
      foreach ($additional_user_fields as $key => $val) {
        $additional_field_array[$key] = (!empty($user_row[$key])) ? format_text($user_row[$key], $config['html_comments'], $config['wordwrap_comments'], $config['bb_comments'], $config['bb_img_comments'], 1) : REPLACE_EMPTY;
        $additional_field_array['lang_'.$key] = $val[0];
      }
      if (!empty($additional_field_array)) {
        $site_template->register_vars($additional_field_array);
      }
    }
    $content = $site_template->parse_template("member_profile");

1.) with this user can add HTML but will not be showed on his profile. (settings like for Comments in your admin CP)
2.) wordwrap will be used
3.) not allowed words will be displayed with ***
4.) BBCode can be used. (settings like for Comments in your admin CP)

[thunderstrike]

Ok - this is good think.