|
|
| Message |
 Posted:
Mon Aug 11, 2008 5:37 pm Post subject:
|
|
|
Yes, it would require a mod to the forums. I've steered clear of mods here just because I'm a lazy bastard and modding the forums makes me have to input all the code changes manually when we upgrade to new phpbb releases instead of just clicking a file (I already have to do this for my own site!). 
If I get bored, I'll look into it. Of course this isn't my site so you're welcome to do whatever you like. You won't hurt my feelings one bit!
Of course, you break it, you fix it. 
|
|
|
|
 |
|
 |
|
 |
 |
|
 |
|
|
| Message |
| Posted:
Mon Aug 11, 2008 5:50 pm Post subject:
|
|
|
| sCaryDeth wrote: | Yes, it would require a mod to the forums. I've steered clear of mods here just because I'm a lazy bastard and modding the forums makes me have to input all the code changes manually when we upgrade to new phpbb releases instead of just clicking a file (I already have to do this for my own site!).
If I get bored, I'll look into it. Of course this isn't my site so you're welcome to do whatever you like. You won't hurt my feelings one bit!
Of course, you break it, you fix it. |
If I was going to do anything it would be to set up a separate instance of PhpBB running the latest version, then mod it to support embedded video and audio players. (I suspect there must be more generic mod than one only supporting "YouTube") Then see about exporting the existing user information and posts from the MySQL datbase for the current forums and importing them into the new instance. Assuming that ALL worked, we could look at a "cutover". Sounds like a lot of work... 
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Message |
| Posted:
Mon Aug 11, 2008 6:04 pm Post subject:
|
|
|
Hmm.. I came across this while looking around. It is from a PhpBB support fourm. Not sure what version it references though.
*********
How To Embed Videos With phpBB Administrator
- Step 1: Go to the Administration Panel
- Step 2: Go to the Configuration section in General Admin
- Step 3: Scroll down to User and Forum Basic Settings
- Step 4: Enable Yes at Allow HTML line
- Step 5: At Allowed HTML Tags line, add the following HTML tags: object, embed & param.
Once done, embedding videos will become possible.
Examples
Note: embed code used is for YouTube videos embedding.
Normal video embed code (without autoplay and looping)
<object width="425" height="350"><param name="movie" value="VIDEOURL"></param><param name="wmode" value="transparent"></param><embed src="VIDEOURL" type="application/x-shockwave-flash" wmode="transparent" width="425" height="350"></embed></object>
Video embed code with autoplay (without looping)
<object width="425" height="350"><param name="movie" value="VIDEOURL&autoplay=1"></param><param name="wmode" value="transparent"></param><embed src="VIDEOURL&autoplay=1" type="application/x-shockwave-flash" wmode="transparent" width="425" height="350"></embed></object>
Video embed code with looping (without autoplay)
<object width="425" height="350"><param name="movie" value="VIDEOURL&loop=1"></param><param name="wmode" value="transparent"></param><embed src="VIDEOURL&loop=1" type="application/x-shockwave-flash" wmode="transparent" width="425" height="350"></embed></object>
Video embed code with both autoplay & looping
<object width="425" height="350"><param name="movie" value="VIDEOURL&autoplay=1&loop=1"></param><param name="wmode" value="transparent"></param><embed src="VIDEOURL&autoplay=1&loop=1" type="application/x-shockwave-flash" wmode="transparent" width="425" height="350"></embed></object>
*********
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Message |
| Posted:
Mon Aug 11, 2008 6:22 pm Post subject:
|
|
|
bbcode is there to replace html coding to keep unwanted occurances from occuring..
IE: dumb asses playing games and what not, I don't think turning on html is a good idea
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Message |
| Posted:
Mon Aug 11, 2008 6:28 pm Post subject:
|
|
|
| .:Boo Radley:. wrote: | bbcode is there to replace html coding to keep unwanted occurances from occuring..
IE: dumb asses playing games and what not, I don't think turning on html is a good idea |
Possibly not. However it appears you can restrict it to the codes (object, param and embed) needed to support just this kind of thing. Both "param" and "embed" are dependent on the "object" code in this case, and can't be used alone. So the question becomes, what else could be put in as an "object" that might be a problem?
Your point is very well taken however. It does speak to the desirability of a mod that introduces a "special" BBCode specifically designed to embed a player instead of the more loose option of allowing any "object".
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Message |
| Posted:
Mon Aug 11, 2008 6:37 pm Post subject:
|
|
|
ok.
to be honest it really really wasn't all that difficult to "mod" for youtube, I googled it and followed directions. I backed up the files I changed before starting of course. I probably have the "readme" me saved somewhere.
I removed it because even though it was effectively streaming from a remote site it still slowed down available resources.
And for some reason it bypassed the confirm age button.
at any rate good luck with it
http://www.westernstudios.net/tutorial-youtube-phpbb
|
|
|
|
|
|
|
|
| Message |
| Posted:
Mon Aug 11, 2008 6:41 pm Post subject:
|
|
|
ok check out the little working check boxes "DONE" in that tutorial
that's just cool as hell
|
|
|
|
|
|
|
|
| Message |
| Posted:
Mon Aug 11, 2008 6:43 pm Post subject:
|
|
|
| .:Boo Radley:. wrote: | ok check out the little working check boxes "DONE" in that tutorial
that's just cool as hell |
That is neat.. I usually just draw a line though stuff I complete on the screen with a dry erase marker! Ok, scrolling is a problem.
_________________
________
|
|
|
|
|
|
|
|
| Message |
| Posted:
Mon Aug 11, 2008 7:44 pm Post subject:
|
|
|
I will be happy to make those changes. No problem.
But really... Who all will take advantage of actually typing in html code to embed video when they can just link it via bbcode which is so much easier for the average user. To me the possible security implications far out weigh the usability imho.
_________________
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Message |
| Posted:
Mon Aug 11, 2008 8:09 pm Post subject:
|
|
|
| sCaryDeth wrote: | I will be happy to make those changes. No problem.
But really... Who all will take advantage of actually typing in html code to embed video when they can just link it via bbcode which is so much easier for the average user. To me the possible security implications far out weigh the usability imho. |
You don't type in all that crap, that would be a nightmare. On YouTube, if you look to the right of the video you are viewing, it has a link called "embed" which puts the code in your clipboard. Then you just paste it as is into a message here.
It's not a big thing for sure, as you can put the BBCode with the code URL in square braces and add a link to any page you want. It's just that when you click on a link it opens a new tab and loads the entire YouTube page, whereas with embedded players you just click on the player and it well, plays. The other advantage is you can see the first frame of what is going to be playing before you play it, so you know if you want to bother.
It's all the rage on "blogs" and such, and while I know that PhpBB isn't Wordpress, I just thought if it was fairly easy...
Up to you Freak...
_________________
________
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Message |
| Posted:
Mon Aug 11, 2008 11:06 pm Post subject:
|
|
|
Ahhh... I see! Yea, I'll hook you up tomorrow when I'm at work bored. lawl
So, just to be clear you don't see any real security concerns with it? I haven't done any research on the matter so I'll trust your opinion on the matter.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Message |
| Posted:
Mon Aug 11, 2008 11:23 pm Post subject:
|
|
|
| sCaryDeth wrote: | Ahhh... I see! Yea, I'll hook you up tomorrow when I'm at work bored. lawl
So, just to be clear you don't see any real security concerns with it? I haven't done any research on the matter so I'll trust your opinion on the matter. |
I think we need to keep an eye on it of course. I don't see any real "security" concerns for the host, since the "object" runs as a dialog between the host specified in the object (like YouTube) and the local pc's browser / flash plugin and not on the server. I suppose someone could embed an object that gives grief to someone clicking on it, but that is true if they just post a link to a page with a weird embedded object set to "autoplay", and one of our users clicks on it.
The biggest concern I have read about with "enabling html" in general in PhpBB is that if you let folks post just any 'ol html they can put in formatting code like line breaks or tables or god forbid Javascript (with Javascript being something I WOULD worry about from a security standpoint), that could just absolutely tear up the appearance of of the currently loaded page in the user's browser. With the way you can restrict the allowed html to just the "object" tag and supporting tags like "param" and "embed", I think we are fairly safe from that stuff.
I would be more worried if we had a lot of unknown folks posting here, and we were having problems with folks trolling, posting links to malware sites, or posting pictures of porn or something (other than Ren's "Fat Girl" pics of course). With the way you have locked down the ability to post to just "registered" people and done apparently GREAT work on keeping the "bots" from registering, I haven't seen any problem in a long time.
If it works, let's give it a go and see what happens. If we have even one instance of someone posting an embedded object that doesn't just play a video or music, or issues with some knucklehead posting 100 videos in one message (making the page take forever to load for our users) we can yank it.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Message |
| Posted:
Tue Aug 12, 2008 5:06 am Post subject:
|
|
|
bbcode linked youtube video
http://www.westernstudios.net/ftopict-1470.html
as seen from here
http://www.westernstudios.net/tutorial-youtube-phpbb
using
[youtube] link copied from address bar [/youtube]
much easier bypassing the need to mess with html at all, allows - restrictions etc.
But like I said it slowed our board down and there was no control
over the age restricted content. Not that there is control over such content
now other than self governed maturity. Which has worked out very well.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Message |
| Posted:
Tue Aug 12, 2008 10:04 am Post subject:
|
|
|
Both object and embed tags can be used for a lot of malicious stuff although I really don't think that would be an issue here. Most browsers are updated enough to not allow those attacks to go through ie. thousands of little pop-up windows, virus penetrations etc.
I personally like html vs. bbcrap, but it can be a nightmare. Plus a lot of users here use Firefox... its easier to get away with more "embed" tag stuff because firefox allows cross-site scripting etc which then can get really nasty ie. embedding webpages within webpages within webpages etc. IE doesn't yet support that I think. Haven't tried since v.6.
I once used an object code to crash peoples computers as a joke at a rather offensive website that was illegal. I had it playing super fast techno music while thousands of pop-ups just kept on rollin' in untill you basically had to crash your own comp.
_________________
http://docer.blogspot.com/
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Message |
| Posted:
Tue Aug 12, 2008 10:16 am Post subject:
|
|
|
I would prefer it if the "html" approach works out, since it give us a lot more flexibility (embedding both YouTube and Google Video, music players from IMEEM and Last.FM and others, etc.) With the BBCode "mod" approach, you have to code and deploy a "mod" for each site you want to support, and I don't think Freak wants to try and keep up with requests to add support for every new "Web 2.0" site that comes along.
The other nice thing about the html approach (appropriately restricted to just object, param and embed) is that if we do have a problem Freak can turn it back off with a 30 second visit to the Administrator's Panel instead of having to change and upload code etc.
If only the BBCode approach ends up working well though, or we run into problems with the html method, so be it. We can try the html, if we don't like it maybe give the BBCode approach a shot, and if that's a bust, then the hell with the whole thing.
|
|
|
|
|
|
|
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
