EE sites have been plagued with spam accounts targeting the bio field with html links and bbcode to do the same. Including mine. I am sure one of the 2.x releases disabled html code by default but cannot find it in the change log.

Other than hacking the core, any options to disable this?


Update - found this "Altered member profile fields to disallow HTML." in : http://ellislab.com/expressionengine/user-guide/about/changelog.html#version-2-1-1

So looks like it was added, but not to the forum member pages perhaps. Classic EL.

  • Are you actually using the default member profile templates? May 31 '14 at 23:31
  • Actually the forum module is the only place these profile pages are visible. New member registration is turned on, but only the forum based registration page is used.
    – Dan
    Jun 1 '14 at 8:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.