Invision Community 4: SEO, prepare for v5 and dormant account notifications Matt November 11, 2024Nov 11
Posted October 28, 200618 yr I want to use the Flash BB Code to embed Google videos, but I don't want all members to use it.So is it possible to add group permissions?As an idea, is there a code that can be inserted into the BB Code to allow Root Admin access only?<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0" width="550" height="400" id="Untitled-1" align="middle"> <param name="allowScriptAccess" value="sameDomain" /> <param name="movie" value="{content}" /> <param name="quality" value="high" /> <param name="bgcolor" value="#ffffff" /> <embed src="{content}" quality="high" bgcolor="#ffffff" width="550" height="400" name="Untitled-1" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" /> </object> :unsure:
October 28, 200618 yr I would suggest to changing {content} to http://video.google.com/videoplay?docid={content} so they put the number in, and can't inject URLs to harmful videos. And you don't have to worry about other users abusing it (too much).Though I can't take credit for this soultion :P
October 29, 200618 yr I would suggest to changing {content} to http://video.google.com/videoplay?docid={content} so they put the number in, and can't inject URLs to harmful videos. And you don't have to worry about other users abusing it (too much).How would you incorporate that into the BB Code above?Like this?<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0" width="550" height="400" id="Untitled-1" align="middle"> <param name="allowScriptAccess" value="sameDomain" /> <param name="movie" value="http://video.google.com/videoplay?docid={content}" /> <param name="quality" value="high" /> <param name="bgcolor" value="#ffffff" /> <embed src="{content}" quality="high" bgcolor="#ffffff" width="550" height="400" name="Untitled-1" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" /> </object> :unsure:
October 29, 200618 yr YesJust dont make it visable to members if they catch on - well theres no security hole and if a member uses it warn them :)
October 29, 200618 yr For those of you interested in using this code for Google videos I managed to get it to work with a little tweaking.This code means the Flash tags will only work with Google Videos, so if you want to maintain your Flash BB Code you can call this Code 'Google' and use [google] tags.<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0" width="550" height="400" id="Untitled-1" align="middle"> <param name="allowScriptAccess" value="sameDomain" /> <param name="movie" value="http://video.google.com/googleplayer.swf?docid={content}" /> <param name="quality" value="high" /> <param name="bgcolor" value="#ffffff" /> <embed src="{content}" quality="high" bgcolor="#ffffff" width="550" height="400" name="Untitled-1" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" /> </object>You insert ONLY the video ID number between the tags. :thumbsup:
October 29, 200618 yr Just to maintain XHTML compliance, I would suggest leaving off the "id" attribute of the Object tag. Otherwise, you invalidate every single page that more than one flash tag is used. Also, getElementById has ... "unpredictable" ... results if more than one element shares an ID.
October 29, 200618 yr Could you write that out as an amendment to that code? It's not mine and I don't understand most of it. :unsure:
October 29, 200618 yr <object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0" width="550" height="400" align="middle"> <param name="allowScriptAccess" value="sameDomain" /> <param name="movie" value="http://video.google.com/googleplayer.swf?docid={content}" /> <param name="quality" value="high" /> <param name="bgcolor" value="#ffffff" /> <embed src="{content}" quality="high" bgcolor="#ffffff" width="550" height="400" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" /> </object>I'm guessing he means like that.
October 30, 200618 yr Wolf speaks truth, yes I did just mean grabbing the<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0" width="550" height="400" align="middle">and removing the id='Untitled-1'part.
October 30, 200618 yr and removing the id='Untitled-1' part.And the "name="Untitled-1" part? :unsure:
October 30, 200618 yr And the "name="Untitled-1" part? :unsure:Hmm. Theoretically, multiple elements can have the same name. Buuuuut, if I'm not mistaken, the only browser that handles multiple elements with the same name in a halfway decent manner is (What the heck?) Internet Explorer. Gecko just doesn't have the methods web devs use to get at elements.That said, it is valid code to have multiple elements with the same name (the same way it is allowed to have three people named "John" in a room, but not three people with the same SSN - under normal circumstances), just not the same id.
Archived
This topic is now archived and is closed to further replies.