24 July 2010, 13:40

Does anyone know how to add code to profile page?  I have used a Text box to include html - via the html editor - which seems to work from the perspective of the text box, but when the text box is rendered the html has not been included.  for example...

edit text box to include following code ->

<p>
<object width="205" height="350" classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=9,0,28,0">
<param name="base" value=http://www.mywebsite />
<param name="movie" value="http://www.mywebsite/Donate/pdm/photo_donation_meter_full.swf" />
<param name="allowFullScreen" value="true" />
<param name="quality" value="high" />
<param name="flashVars" value="dmID=1" />
<param name="align" value="middle" />
<param name="wmode" value="transparent" />
</object>
</p>
.......

This works when I update the html source editor.  (i can see the .swf in the text box.  But when I save the text box being added to profile page, it seems the html has been changed (cleaned) and does not present the html I added via the html source editor. 

Any help is appreciated.

Zenotis

24 July 2010, 14:51

Okay,  Let me refine my question! I see something called HTML filter.  I assume the need for Html filtering is to keep dangerous code from being added,  however, what if i have some homegrown html that I want to be added to a view,  How can I create a homegrown html filter?

Thanks again.

Zenotis

24 July 2010, 14:58

Hi Zenotis,

You are right, the HTML filter erases all potentiality of dangerosity in the code. Moreover I would not trust the wysiwyg editor and would better use the HTML artefact instead of the TEXT artefact. So you can write the HTML the way you want.

On Moodle for exemple administrators can choose if they accept potentialy dangerous code to be added as resource or not. Maybe you could add a feature request for that in the tracker.

Best regards,

-dajan