[Solved]: Disallowed html tags and SQL Querys [forum issue]

[t3hmadhatt3r]

I've been trying to post some tutorials on XSS and one on Oracle SQL injection but I'm having many problems. When I try to post anything with a few html tags in it even if its inside

Code: Select all

 and/or [quote] it will only give me the error message "The html tags you used are disabled". When I try to post the oracle sql injection tutorial, and this is really weird, I get sent back to the home page. Why is that? I think its because of some blacklist you guys are using but, SQL Query's should be allowed inside [quote] and or [code]  tags... Is there anything that can be done to fix this issue?

[ayu]

This is an old issue that we have had for like forever ^^ Fixing it now would take too much time from other more important projects and might risk that sites security in the process. We are working on setting up a new cms, so no use spending too much time fixing this one

[DNR]

yea we block that stuff, strict rulesets. so we have a code.suck-o.net url that we dump script on.

http://code.suck-o.com/" onclick="window.open(this.href);return false;

link your tut to reference where it is on the pastebin
ie ..code.suck-o.com/101



DNR

[t3hmadhatt3r]

Oh. Great! Thanks.....

[DNR]

Suck-o Help Desk Ticket # 13370
[DNR crumbles up the ticket and makes a three-point shot into the round filing cabinet]

Solved.

DNR

[CommonStray]

Code: Select all

circuitbomb pops head out of the round filing cabinet and fires a spitwad at DNR

[Big-E]

Code: Select all

Big-E jumps in on role playing dressed as Tiberius the great Roman General! 

....

Code: Select all

...runs!