N.W.F. Regarding [IMG]

[stud]

Hope this is the correct section......

On my site , when I want to have a pic on the main part by using the (http://) nothing is coming up ?
Also , same for any links I put up , you can't click on them

Is this just a simple setting that is not right ??

You can see by going to www.CarbonCruisers.com

WARNING NOT WORK SAFE , 18+ MATERIAL !!!!

Can anyone help ??

Robert

[Joachim Müller]

In the future, read the announcements we make and the docs that come with your copy of coppermine first before asking questions.

In cpg1.4.21, the usage of the bbcode tag [ i m g ] has been disabled because of security reasons. This is being explained in the announcement thread "cpg1.4.21 Security release - upgrade mandatory!":

The release covers a recently discovered vulnerability that allows (if unpatched) a user to launch a CSRF attack (definition) against your website (milw0rm exploit 8114 and 8115).  The vulnerability is due to the processing of the bbcode tags [ i m g ] and [ u r l ].  The attack that can be launched through these tags can be wide-reaching and all gallery administrators must take this seriously.  Since cpg1.4.x is a stable release package, the Coppermine development team could not address this vulnerability without a large change in the way forms are handled.  So the solution is to remove the correct processing of the two bbcode tags, [ i m g ] and [ u r l ].  This is not a final solution but it is necessary to address this serious vulnerability.  The Coppermine dev team is working on a way to handle these bbcode tags and will post here with more information.  You can read information about how these tags are now processed and how to hack in your own solution in the bbcode section of the documentation.

Read the docs section as well that the quoted article refers to.