I post often in a message board. Someone often posts threads with no title. We cannot figure out how they do it because a blank space doesn’t work and nither does that <fontwhite>t thing.
Any suggestions?
How do I make text invisible in a message board?
This entry was posted on 23/10/2009 (Friday) at 8:23 pm and is filed under Arezeez. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.
|
|
|
Printed from: http://arezeez.com/2009/10/23/how-do-i-make-text-invisible-in-a-message-board/ .
© 2010.
© 2010.
Maybe they are using something like
& #160;
or &#nbsp;
I couldn’t get the #160 part to submit properly without adding in a space.
A possibility is that they are using < br />.
A possibility is that they are using a non-breaking space: & nbsp ;
The more likely possibility is (if HTML is enables) that they are using styles:
<span style="visibility: hidden;">This text doesn’t exist Ó.õ</span>
Good Luck!
You didn’t say what free message board software it’s in.
The <font> element has been deprecated for years – if someone’s hacking your script, they won’t be doing it right on the page, and they won’t be using a font tag. If it’s some regular user you know not to be a hacker, and it’s not a hack attempt, it’s **definately** a buggy software problem.
If the original author of this message board software was stupid enough to only validate input with Javascript, it’s easy enough to find out. Try disabling Javascript in your browser, see if you can get one in without a title. If you can, you probably have much larger things to worry about than titles, it would mean it’s got deeper security holes. Any coder that would rely **only** on Javascript to validate input needs to go back to security school.
If that doesn’t do it, and it’s limited to specific users known to not be troublemakers, it’s the software. Otherwise they’ve possibly found a security hole that allows them to bypass validation and remotely input data without even visiting the page, via a bot or something.
Believe all message board use BBCode and not HTML so all the codes given will not work. You can always wrap the text in the same color as the background, but you have to use BBCode to do it:
BBCode Guide:
http://www.bbcode.org/
http://forum.cartographersguild.com/misc.php?do=bbcode
http://forums.fallenearth.com/fallenearth/misc.php?do=bbcode
http://www.phpbb.com/community/faq.php?mode=bbcode
Ron