I want to use the Flash BB Code to embed Google videos, but I don't want all members to use it.

So is it possible to add group permissions?


As an idea, is there a code that can be inserted into the BB Code to allow Root Admin access only?

<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0" width="550" height="400" id="Untitled-1" align="middle">
<param name="allowScriptAccess" value="sameDomain" />
<param name="movie" value="{content}" />
<param name="quality" value="high" />
<param name="bgcolor" value="#ffffff" />
<embed src="{content}" quality="high" bgcolor="#ffffff" width="550" height="400" name="Untitled-1" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" />
</object>

:unsure:

I would suggest to changing {content} to http://video.google.com/videoplay?docid={content} so they put the number in, and can't inject URLs to harmful videos. And you don't have to worry about other users abusing it (too much).

Though I can't take credit for this soultion :P

I would suggest to changing {content} to

http://video.google.com/videoplay?docid={content}

so they put the number in, and can't inject URLs to harmful videos. And you don't have to worry about other users abusing it (too much).

How would you incorporate that into the BB Code above?

Like this?

<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0" width="550" height="400" id="Untitled-1" align="middle">
<param name="allowScriptAccess" value="sameDomain" />
<param name="movie" value="http://video.google.com/videoplay?docid={content}" />
<param name="quality" value="high" />
<param name="bgcolor" value="#ffffff" />
<embed src="{content}" quality="high" bgcolor="#ffffff" width="550" height="400" name="Untitled-1" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" />
</object>

:unsure:

Yes

Just dont make it visable to members if they catch on - well theres no security hole and if a member uses it warn them :)

For those of you interested in using this code for Google videos I managed to get it to work with a little tweaking.

This code means the Flash tags will only work with Google Videos, so if you want to maintain your Flash BB Code you can call this Code 'Google' and use [google] tags.

<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0" width="550" height="400" id="Untitled-1" align="middle">
<param name="allowScriptAccess" value="sameDomain" />
<param name="movie" value="http://video.google.com/googleplayer.swf?docid={content}" />
<param name="quality" value="high" />
<param name="bgcolor" value="#ffffff" />
<embed src="{content}" quality="high" bgcolor="#ffffff" width="550" height="400" name="Untitled-1" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" />
</object>

You insert ONLY the video ID number between the tags.


:thumbsup:

Just to maintain XHTML compliance, I would suggest leaving off the "id" attribute of the Object tag. Otherwise, you invalidate every single page that more than one flash tag is used. Also, getElementById has ... "unpredictable" ... results if more than one element shares an ID.

Could you write that out as an amendment to that code?

It's not mine and I don't understand most of it.


:unsure:

<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0" width="550" height="400"  align="middle">
<param name="allowScriptAccess" value="sameDomain" />
<param name="movie" value="http://video.google.com/googleplayer.swf?docid={content}" />
<param name="quality" value="high" />
<param name="bgcolor" value="#ffffff" />
<embed src="{content}" quality="high" bgcolor="#ffffff" width="550" height="400" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" />
</object>

I'm guessing he means like that.

Wolf speaks truth, yes I did just mean grabbing the

<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0" width="550" height="400" align="middle">

and removing the

id='Untitled-1'

part.

and removing the id='Untitled-1' part.

And the "name="Untitled-1" part?


:unsure:

And the "name="Untitled-1" part?

:unsure:

Hmm. Theoretically, multiple elements can have the same name. Buuuuut, if I'm not mistaken, the only browser that handles multiple elements with the same name in a halfway decent manner is (What the heck?) Internet Explorer. Gecko just doesn't have the methods web devs use to get at elements.

That said, it is valid code to have multiple elements with the same name (the same way it is allowed to have three people named "John" in a room, but not three people with the same SSN - under normal circumstances), just not the same id.