How to Use a Single BBCode to Embed Contents with Multiple Iframes?

[odf]

Hello Members,

I want to load/embed contents from various locations using a single BBCode but each content has the same parent/top-level domain in an iframe, here are two examples:

Code: Select all

<iframe src="https://www.domain.com/container/intl/en/products.html{SIMPLETEXT}" width="800" height="600" scrolling="no" allowfullscreen></iframe>

and

Code: Select all

<iframe src="https://www.domain.com/container/premium/intl_products.html{SIMPLETEXT}" width="800" height="600" scrolling="no" allowfullscreen </iframe>

The BBCode for either of the iframe can be

Code: Select all

[prod]{SIMPLETEXT}[/prod]

How can I use just one BBCode and be able to load contents from either of the two iframes above at a time?

Thanking you in advance.

odf

[RoboYonk]

Hi!

did you try just add such a bbcode?

For example In my board I have a bbcode mod from Advanced BBCode Box (but I can modify it however I want).
And it is quite complicated.

Code: Select all

[mod={TEXT1}]{TEXT2}[/mod]

is replaced to:

Code: Select all

<table class="ModTable" style="background-color:#FFFFFF;border:1px solid #000000;border-collapse:separate;border-spacing:5px;margin:1em 0;padding:0;width:100%;color:#333333;overflow:hidden;"><tr><td class="exclamation" rowspan="2" style="background-color:#ff6060;font-weight:bold;font-family:'Times New Roman',Verdana,sans-serif;font-size:4em;color:#ffffff;vertical-align:middle;text-align:center;width:1%;">&nbsp;!&nbsp;</td><td class="rowuser" style="border-bottom:1px solid #000000;font-weight:bold;">{L_MESSAGE} {L_FROM}{L_COLON} {TEXT1}</td></tr><tr><td class="rowtext">{TEXT2}</td></tr></table>

based on the example above, I don't see any problem with adding a new bbcode to the APC panel.

[odf]

Thank you. The BBCode works just fine, the issue is I don't want to use/create a different BBCode for eache iframe.

[JoshyPHP]

You need to explain how the proposed solution differs from what you need, with practical examples of what the users would enter and how it would be displayed.

[odf]

You need to explain how the proposed solution differs from what you need, with practical examples of what the users would enter and how it would be displayed.

Hi JoshyPHP,

This is what I'm thinking:

Consider the iframe

Code: Select all

<iframe src="https://www.domain.com/container/intl/en/products.html{SIMPLETEXT}" width="100%" height="450" scrolling="no" allowfullscreen></iframe>

which can be used with the BBCode

Code: Select all

[prod]{SIMPLETEXT}[/prod]

Now, How to change the iframe to something like this

Code: Select all

<iframe src="https://www.domain.com/container/key={SIMPLETEXT}" width="100%" height="450" scrolling="no" allowfullscreen></iframe>

so that the user can embed contents by putting everything after "https://www.domain.com/container/" into the BBCode, that's

Code: Select all

[prod]intl/en/products.html[/prod]

for this example ?

odf

[JoshyPHP]

You didn't explain how the definition you proposed does not achieve the thing you want to do, so I'm going to guess you need to replace {SIMPLETEXT} with {TEXT}. If that doesn't do the thing, you need to post practical examples of what the users would enter and the HTML it should produce.

[odf]

You didn't explain how the definition you proposed does not achieve the thing you want to do, so I'm going to guess you need to replace {SIMPLETEXT} with {TEXT}. If that doesn't do the thing, you need to post practical examples of what the users would enter and the HTML it should produce.

Replacing key={SIMPLETEXT} with {TEXT} works by triggers a seemingly very serious security issue:

"The BBCode you are trying to add seems to use a {TEXT} token inside a HTML attribute. This is a possible XSS security issue. Try using the more restrictive {SIMPLETEXT} or {INTTEXT} types instead. Only proceed if you understand the risks involved and you consider the use of {TEXT} absolutely unavoidable."

Any secure solution? Neither {SIMPLETEXT} nor {INTTEXT} works!

odf

[JoshyPHP]

If you're on phpBB 3.2 you can almost certainly ignore this warning.

[ViolaF]

And in 3.3.*?
you "can" or "should it not" ignore it .. or what??

[JoshyPHP]

phpBB 3.3 won't produce a warning with that definition.