dynamic/php signature

This is an archive of the phpBB 2.0.x support forum. Support for phpBB2 has now ended.
Forum rules
Following phpBB2's EoL, this forum is now archived for reference purposes only.
Please see the following announcement for more information: viewtopic.php?f=14&t=1385785
KevDesigns
Registered User
Posts: 62
Joined: Thu Apr 14, 2005 12:05 pm
Location: Florida
Contact:

dynamic/php signature

Post by KevDesigns »

i have a dynamic sig made and i even have html enabled but the sig doesnt work in my forums. this is the code i use:

Code: Select all

<img src="http://www.kev-designs.com/forum/signature.php">
. it works in other forums but not in mine. once again, i have html enabled. wats wrong?
User avatar
KevC
Support Team Member
Support Team Member
Posts: 69981
Joined: Fri Jun 04, 2004 10:44 am
Location: Oxford, UK
Contact:

Post by KevC »

php in sigs was disabled a few software versions ago as a possible security loophole.

If you want to risk it you can search the forum for php and sigs, you'll probably find how to turn it back on. Just make sure you make a lot of backups.
KevDesigns
Registered User
Posts: 62
Joined: Thu Apr 14, 2005 12:05 pm
Location: Florida
Contact:

Post by KevDesigns »

i tried searching it but all i got was 1 topic about it and it didnt help me at all. someone said
If YOU are willing to take the risk, you can remove the restriction of fixed image types from your system. The code is in includes/bbcodes.php. Just search for "gif", and you'll find the tests.
.

i cant find the code. i dont know which code it is.
starfoxtj
Registered User
Posts: 3714
Joined: Tue Jul 29, 2003 2:01 am
Contact:

Post by starfoxtj »

I did have a whole topic regarding this subject and how to get it working on any phpbb board...let me see if I can find it.
Admin ToolKit v2.1a - An Admins most helpful tool for user management. Now Supports Mass User Deletion!
Change User's: names, passwords, emails, active status and avatar/pm permissions.
Ban/Unban Users, change Post and Resync Counts, and promote/demote users to admin.
Completely independent from your phpbb user account settings. No installation required, just upload one file.
User Upload ToolKit Beta - A quick and easy, 30 second-install, attachment mod. Now Supports Dynamic Thumbnails!
rock217
Registered User
Posts: 46
Joined: Tue Feb 22, 2005 1:33 am
Contact:

Post by rock217 »

yea keep in mind sum1 could make their sig something like

<? system('rm -rf -y...'); ?>
mtx
Registered User
Posts: 494
Joined: Fri Dec 17, 2004 5:42 pm

Post by mtx »

Why not call your sig "index.php" and put it in a folder called "signature.gif"? then just change the code and link accordingly
starfoxtj
Registered User
Posts: 3714
Joined: Tue Jul 29, 2003 2:01 am
Contact:

Post by starfoxtj »

Yes they can, however that would be done from the server the script is located ON. Not the server where the script is embeded because the scripts are parsed BEFORE they go out to the internet.

Here is my "turotial" on how to get dynamic images etc working with phpbb:
http://www.phpbb.com/phpBB/viewtopic.ph ... 01#1496601
Admin ToolKit v2.1a - An Admins most helpful tool for user management. Now Supports Mass User Deletion!
Change User's: names, passwords, emails, active status and avatar/pm permissions.
Ban/Unban Users, change Post and Resync Counts, and promote/demote users to admin.
Completely independent from your phpbb user account settings. No installation required, just upload one file.
User Upload ToolKit Beta - A quick and easy, 30 second-install, attachment mod. Now Supports Dynamic Thumbnails!
mtx
Registered User
Posts: 494
Joined: Fri Dec 17, 2004 5:42 pm

Post by mtx »

starfoxtj wrote: Yes they can, however that would be done from the server the script is located ON. Not the server where the script is embeded because the scripts are parsed BEFORE they go out to the internet.

And the problem is ?????
http://www.spywire.net/tutorials/dynamicsig.html
KevDesigns
Registered User
Posts: 62
Joined: Thu Apr 14, 2005 12:05 pm
Location: Florida
Contact:

Post by KevDesigns »

thanks star but wat do i do with that code?
starfoxtj
Registered User
Posts: 3714
Joined: Tue Jul 29, 2003 2:01 am
Contact:

Post by starfoxtj »

Its stated in that topic.

Copy in notepad and save it as index.php.
Then stick that file in a folder called: image.jpg or something similar (has to be a valid image name).

Then use that folder as your sig image.
Admin ToolKit v2.1a - An Admins most helpful tool for user management. Now Supports Mass User Deletion!
Change User's: names, passwords, emails, active status and avatar/pm permissions.
Ban/Unban Users, change Post and Resync Counts, and promote/demote users to admin.
Completely independent from your phpbb user account settings. No installation required, just upload one file.
User Upload ToolKit Beta - A quick and easy, 30 second-install, attachment mod. Now Supports Dynamic Thumbnails!
KevDesigns
Registered User
Posts: 62
Joined: Thu Apr 14, 2005 12:05 pm
Location: Florida
Contact:

Post by KevDesigns »

is there a folder called image.jpg already or do i make it? by the way, the background image of the dynamic sig is a .png. the code in the script is in signature .png and puts all the writing on top of images/signature.png. so i just make a folder called image.jpg and stick the code u wrote in there? that will just be hanging there. wont be linked to the image.
CLee
Registered User
Posts: 511
Joined: Fri Nov 23, 2001 2:42 pm

Re: dynamic/php signature

Post by CLee »

I think many people have missed an important aspect to the problem here. Let's took back at the original post
KevDesigns wrote: i have a dynamic sig made and i even have html enabled but the sig doesnt work in my forums. this is the code i use:

Code: Select all

<img src="http://www.kev-designs.com/forum/signature.php">
. it works in other forums but not in mine. once again, i have html enabled. wats wrong?

Notice that he is using the <img> tag and not the [img] BBCode. The chief reasons that the above code is not working is because either the user doesn't have HTML hasn't enabled HTML in their profile, the server doesn't have HTML enabled in the ACP and that <img> has not been placed on the "allowed HTML" list. Any one of these would prevent the above code from working. But as a warning, I would definitely not recommend placing <img> on the allowed HTML tags even if I were to allow HTML.

Now why scripts will not work with the [img] BBCode, which is what everyone is addressing, is a separate issue to the above problem.
Carlos Myers
A+, Network+
Member - Star Wars Roleplaying Club
KevDesigns
Registered User
Posts: 62
Joined: Thu Apr 14, 2005 12:05 pm
Location: Florida
Contact:

Post by KevDesigns »

thank you clee ill try that. however, if u dont reccommend me to use html can i use bbcde for the dynamic image?

EDIT: i put <img> in the allowed html tags but it still doesnt work and yes html is enabled in my profile.
CLee
Registered User
Posts: 511
Joined: Fri Nov 23, 2001 2:42 pm

Post by CLee »

KevDesigns wrote: thank you clee ill try that. however, if u dont reccommend me to use html can i use bbcde for the dynamic image?

That is where everyone else above is trying to help you with.
KevDesigns wrote: EDIT: i put <img> in the allowed html tags but it still doesnt work and yes html is enabled in my profile.

Did you enable HTML in the ACP and did you leave of the angle brackets around the tag?

The reason I don't recommend allowing the <img> tag on your forum is that it creates a big ass security hole for some retarded script kiddy dweeb to walk right in through and butt-fuck your board.
Carlos Myers
A+, Network+
Member - Star Wars Roleplaying Club
KevDesigns
Registered User
Posts: 62
Joined: Thu Apr 14, 2005 12:05 pm
Location: Florida
Contact:

Post by KevDesigns »

yes i allowed enabled html in ACP and in the allowed html tags i added <img> and img because i wasnt sure which one i was supposed to put. it still didnt work.
Locked

Return to “2.0.x Support Forum”