Bug 1.5.1 Final - Flash not showing

[ROGUE-Master]

Since the bug forum is down I don't know where else to put this.

Flash in signatures do not work any more....

When I enter the coding in my profile it doesn't work.

For instance when I enter this in my profile this shows up after posts

Code Select Expand

[flash]http://www.URL.com/flash.swf[/flash]

The actual flash does not show up only the text.

And when I put this in,

Code Select Expand

[flash=600,200]http://www.URL.com/flash.swf[/flash]

A URL comes up on the site but no flash. Please fix this.

[[Unknown]]

You _must_ specify the parameters with the flash tag - you always ahve had to.

This is not a bug.  It instead is a security vulnerability fixed.

If you understand the risks (ie. someone getting your administative password and doing whatever they want with your board very easily.) you can turn the fix off in 'Mods' Settings and Options..... but this is NOT recommended.

-[Unknown]

[ROGUE-Master]

How exactly is this a security risk? (ie hows it possible to get the pass when embeddint flash?)

[[Unknown]]

I will not explain how, and discourage anyone else from doing so either.

There's no reason to type it out so someone can find it and do it to other boards... (ie. 1.4.x, etc.)

-[Unknown]

[David]

This is a bug that not only effects YaBBSE but basically ervery other site that allows embeded Flash and has a log in system.