Question SWF video bbcode no longer working..

Hey.. First, a bit thrown by all the template changes, I suppose change is necessary though.. Would have liked more of a choice by default, even the old version had what, 4 I think?

Next up, the search feature here is not working (not on MY site, here on the kunena.com site!). Half the time when I search for soemthing, I get a blank screen, the other half of the time it works properly. I've been noting it since last night, almost seems to have to do with what I search for, but I can't prove that. Example, last night, searching for "flash" (with no quotes) does it, did it last night, and today. However other searches went through and worked.. Not sure what to make of that, but figured I'd mention it.

Now, at last onto my question. The video bbcode [] <--put in there) is not working anymore for flash files. Many users on my site use swf's in their signatures, and they all now just display the actual code instead of the flash video. Using the [ video ] for stuff like youtube links works fine.. Is this a known thing, or is something not right here?

Let me deal first with the flash video question you asked. See html code in posts? and the messages following the one I wrote (msg 4).

For the search problem that's a different subject and, as we can't reproduce the symptoms, maybe we'll just have to forget about it for the time being.

As far as the template changes are concerned, they will be disconcerting for some users (as I mentioned in my 'blog posting Kunena 1.6 - a moderator's view ). Some people love the changes and some people don't. C'est la vie.

Hi,

Thanks a lot for your feedback. We are looking into the search issue.

As for the template and its color choices: You can select different colors for some parts of the template inside the template manager.

If you like other styles, there are several in the extension directory. Simply download and install with the Kunena template manager.

As for swf files - yes you are correct. We got flagged for allowing flags files to be embedded by users, as this represents a security vulnerability. A proof of concept was submitted to us that showed how you can take over controls of the browser with an malicious swf file. We had no choice but to disable the function.
Flash is turning more and more into a security risk for websites. You could program to delete topics or do other bad things, that once a moderator or admin visits that page would get executed without you knowing about it.

As much as we liked that feature, we cannot have it part of our distribution.

If somebody was to create a simple hack - that would be outside of our control - but again, you would open up your site to security vulnerabilities.

Sorry for not being or more help here.

First, let me say thanks for the replies.

@the search: You can reproduce the error? Seriously, your searches for you every time? I've tried on IE8 and FF, both do the same thing.. If that's the case, that's bizzare. (on different PC's too, fwiw).

@the templates: I may have come off harsh, I'm not hating on the new template design/system, and it's cool to know now there are some other options out there. It was never a big deal on the previous version because one of the ones offered by default matched our sites theme/template perfectly

@the meat of the topic, flash: I respect your response, and understand your reasoning. Will you pass along the way to re-enable bbcode flash? My site is a small site, special interest I suppose you could say, no one I don't trust there. And more to the point, don't you think such a decision should be left to the site admin? Make it a congifuration option to allow/enable or not flash code, don't just rip it as a choice from everyone. I mean, by that logic, you should wipe your HDD if you're running a windows operating system, as it COULD potentially be used by hackers to DDoS other computers, or download illegal content, or whatever.. Point is, I respect you and your choice, but humbly request you revisit your decision and allow site admins the decision of whether they want to 'take that risk' or not.

Thanks,

Rooster

Rooster,

Unfortunately we cannot have an options that makes us vulnerable. Eventually we would get flagged and removed from all public listings out there.

We cannot offer you a hack but I can show you what changed in the svn to make Kunena more secure:

joomlacode.org/gf/project/kunena/scmsvn/....php&r1=3464&r2=3486

Hope this helps!

Would there be anything else there? I saw two things that were changed, I reverted them, but it made no difference. Tried to PM ya awhile back on that, not sure if you didn't see it, or don't respond to PM's (I know many people don't, not here, but elsewhere), but if you prefer you can PM me directly on this.