I get a lot of broken posts like this
https://carkiller.com/scottykilmer/qa/is-this-tacoma-too-good-to-be-true/
Looks like posted HTML doesn't get sanitized
Your content is crashed. You've inserted incorrect content and crashed the HTML. You should edit the content and try to fix HTML code of your posts. In other words this is a result of inaccurate data inserting, there is no any bug or problem from wpForo side, the problem comes from your crashed HTML code in the first post of this topic.
Related topics:
- https://wpforo.com/community/general-forums-bug-reports/when-i-cut-past-html-into-post-it-breaks-the-forum/
- https://wpforo.com/community/how-to-and-troubleshooting-2/user-posted-post-that-broke-forum-layout/
- https://wpforo.com/community/how-to-and-troubleshooting-2/one-topic-layout-damaged/#post-43313
Please read my answers in the topic above and be careful when adding a copied content in the post editor.
BTW, when you're adding YouTube Video URL in the post, don't put it as link, make sure it's plain text URL, so just edit the first post and remove the link from YouTube URLs, just insert a URL.
@robert I have no control over what users post. This should have been caught by the software like all decent forum software does. I cannot click the edit button, or any other link or button on that page.
nobody and nothing can control damaged HTML. There is no way to scan damaged HTML in the pot content. If somebody can suggest some code, we'll add it in wpForo for sure.
@robert you should. It's probably a security problem too if people can inject HTML
@exekutive Nope, it is sanitized. We are in 2021 and all that has been taken care of ages ago.
Just nobody can control stray html code with formating.
There is no way to inject HTML by dangerous things. wpForo filters all dangerous HTML tags and JS codes, so you have nothing to worry here. The HTML injection is 100% secure, it's just a structural issue, nothing else.
Maybe it isn't dangerous, but it breaks the page and it's annoying.
There's no way to control what users post, and there's no way to edit the post so ... what's the solution ?
This is still happening and it's very annoying. There is no way to fix it or prevent it.
No other forum software I've used in 15 years does this.
This is a BUG.
Hi @exekutive,
We have tried to crush a post like it was in your forum by the wpForo default form/TinyMCE, but we couldn't reach that the form fixes the HTML before posting. Can you say what method has been used to create that post? Can it be a Cross Posting?
Also, what is the editor form set to, Visual Editor or Text Editor ?
Visual editor.
I think it happens when copy+pasting wpforo content. Specifically, if make a selection that includes a bunch of answers and comments, and the little user info panels.
Here's a recent example:
https://carkiller.com/scottykilmer/qa/2007-mazda-3-2-3l-manual-coolant-leak-what-could-be-the-cause/
The other time I've seen it happen is when people post Youtube videos or embeds. So there could be partial HTML or something.
No results, we can not do that, I don't know how your user crush the Topics. The only solution is to manually remove them.
No results, we can not do that, I don't know how your user crush the Topics. The only solution is to manually remove them.
Maybe this helps:
If you go to the example I linked above and view the source, a couple of lines after the youtube iframe embed, there is malformed html tag:
<p>/p></p>
if you look at the source of the page in my original post, there is another open tag
<p>A"></p>
@exekutive Please go to one offending post or topic, go to the SOURCE ( {;} ) copy the CODE without touching it), zip it and attach it here.
I will take it and post it to my forum and see if it breaks anything.
Is that a safisfying solution for you?
edit this post
https://carkiller.com/scottykilmer/postid/174958/
and change this part of code
<p <div="" class="wpf-embed" style="width: 480px; height:320px">
to this
<p> <div class="wpf-embed" style="width: 480px; height:320px">
@tutrix the edit button doesn't do anything
@tutrix I shouldn't need to do that.
@tutrix I shouldn't need to do that.
Well if you don't want to change anything then leave it as it is