This is a major security issue for us that we can only hack away at imperfectly. At the moment, anyone can come along to our site and start remote linking to pornographic images or worse - and they have, much to the horror of some of our underage members.
We would like to have the ability to turn off HTML posting server-side so people can't get around it. Being a programmer, I know how easy it is to strip out HTML from text. I'm sure this could become a customisable feature with a checkbox or two in the management section. Perhaps with options for HTML on/off on groups, on the forum, and on the member pages.
Posting HTML is fine on small networks where there is a higher level of member trust. Bad HTML posts rarely happen to us, but when they do, it can be an absolute disaster. This feature has been on request from many NCs for months now.
Perhaps, being divorced from the front-line, the Ning team don't realise what an important feature it is.
No comments:
Post a Comment