Getting banned for using [ code ]

Regular Joined: Jun 15, 2005 Posts: 78 Location: AR

For some reason the regular users on my site are getting banned for putting code into thier posts. the reason says scripting but they are using [ code ].... Any ideas?

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Using bbcodes will not stop that. NukeSentinel is set to catch the same tags that are in your mainfile.php file. As is required here and most any site that uses NukeSentinel, you have to break up thos tags, like <scr~ipt>, etc. What I do is just warn and don't actually ban.

New Member Joined: Oct 09, 2005 Posts: 7

My sentinel is banning people for clicking on the scrolling downloads block and download details which the bl;ock links to the details of course. I see its usualy bans on big names or nams like- Filename (MUST HAVE). I was thinking about turning off the scripting blocker as I dont see how a patched site can be succepstibel to scripting anyway and its caused me a few problems with some users. But better safe then sorry I guess.

Posted: Sun Oct 09, 2005 11:01 am

Here again, this is well documneted in these forums. () is so often used for XSS scripting attacks. You need to change all () to []

Posted: Sun Oct 09, 2005 12:13 pm

I had figured out it was the (). I always try to search before asking questions or posting so I apologize for not noticing that had been discussed before.