Recent Topics

1 Oct 31, 2007 15:55    

My b2evolution Version: Not Entered

Getting this pop-up error message in Firefox when I refresh and something similar in Safari. Googling it turned up nothing. Anyone have any ideas what this is about?

http://www.rocktownhall.com/blogs/index.php?cat=14

2 Oct 31, 2007 16:15

Viewing your Javascripts...

Inline Script from http://www.rocktownhall.com/blogs/index.php?cat=14

alert('hui')

and that comes from your list of Poll choices...

<label for="choice_1509">
<input type="radio" id="choice_1509" value="1509" name="poll_aid" />

<script>alert('hui')</script><sup title="Added by users">1</sup> </label>
</li>

3 Oct 31, 2007 16:22

That was it. Thank you so much. It appears the someone added that script as a poll answer. Any idea why?

4 Oct 31, 2007 16:40

To prove that they can.

I'll bring this to the attention of Danny, there should be a fix out shortly

¥

5 Oct 31, 2007 17:18

sammymaudlin: The 'Add and answer' field in Democracy poll is not sanitized. That will be fixed in the next version of the plugin. In the meantime, you'll probably want to disable that feature for your polls. I had to stop using it because spammers found it.

6 Oct 31, 2007 18:45

I appreciate the help guys. Thanks.


Form is loading...