V
V
Vitaly Komlev2010-12-13 23:47:11
PHP
Vitaly Komlev, 2010-12-13 23:47:11

Securely embed video in post text

The first time I ran into the problem of inserting the video code into the text (normal textarea, in general). There are various player codes at the input (for example, auto-generated YouTube, RuTube and others), it is necessary to implement their safe insertion into the text of the entry. All attempts to insert "wrong" code should be blocked. How to distinguish safe player code from potentially unsafe?

Answer the question

In order to leave comments, you need to log in

1 answer(s)
H
Hotpilot, 2010-12-14
@Hotpilot

make a list of url-addresses of allowed players, www.youtube.com , rutube.ru ,…
also add allowScripAccess=never and allowNetworking=internal when inserting SWF, these options restrict flash drive access to other scripts and network resources.

<param allowScriptAccess="never" allownetworking="internal" name="movie" value="http://www.youtube.com/...."></param>

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question