|
if
it's
the
same
as
the
one
that
appeared
a
couple
of
weeks
ago...
|
|
|
|
|
... disabling javascript will disable the redirect. However, it also disables the admin options, and if you re-enable javascript, you need to reload the page to get the admin options to work, so it redirects... etc.
That's in Firefox (I daren't let IE load the redirect page...).
Opera, however, lets you re-enable javascript and does not need the page to be reloaded. So the redirect doesn't occur, and the post can be removed.
I suggested that the message field of any post be parsed and any strings removed to prevent arbitrary code being posted, but ... not happened yet, it seems. Oh Joooooohhhhaaaaaaaaaaannnn... *flutters eyelashes*\n";
content += "\n";
alreadyposted = "no";
function injectquotedtext()
{
if (alreadyposted == "no")
{
document.formreply.message_content.value = content + document.formreply.message_content.value;
alreadyposted = "yes";
}
}
// -->
| | |