Urgent - PLEASE READ - text editor security issues!

[Herself]

Hi,

I run a large network (www.fairiesvampires.com), with about 45,000 members.

 

I've just seen the new text editor, and I'm in a real panic about this, I'm absolutely horrified.

 

The problem is, my network, which is lively at the best of times, has been the target of several trolling attacks, whereby people sign up specifically to post 'shock' images to the forum, such as porn, violent, bloody murder images, even cartoons of child porn.

 

The average age of the users on my site is probably 14-15 years old, and most are Twilight fans, hence the reason the site is targeted by trolls.

 

For two years now, I've had a piece of custom javascript in place to SWITCH OFF the text editor bar, and to prevent users from posting HTML to the forum by stripping it out prior to form submission.

 

TWO YEARS ago I requested that ning urgently add a feature to SWITCH OFF HTML posting at the server-side, to prevent this kind of horrible misuse of the text editor. Ning have never implemented this feature, leaving me at the mercy of a piece of javascript.

 

The upgrade to the text editor has not only broken both pieces of javascript, it's been written in such a way as to prevent me from switching off or tinkering with this feature at all!

 

You have no idea how stressed I am about this - I had to have a laptop including irreplaceable software installs destroyed by the police two years ago when someone posted actual CP to my network. £1,500 of my money down the drain. I only kept the network running after that in the hopes of earning back some of what I lost. And Ning were completely unhelpful and litigious.

 

This latest change means that my network is totally insecure and my kids are at risk of being exposed to goodness knows what - I dread to think.

 

PLEASE PLEASE give me the ability to remove the text editor from my site, I'm begging you. If this isn't fixed, I'm potentially going to have to switch off my forum, which means, in reality, I simply can't keep running my network with Ning as I will no longer earn money from it. It isn't worth it for the trauma that I would have to go through if someone posted CP there.

 

PLEASE FIX THIS, it's SUCH an easy thing to fix server-side (I know, I'm a programmer, it would take one person a couple of hours to write and test!), and do it quickly before the holiday season starts and the trolls come out to play, I'm absolutely sick with worry. I don't want to spend my Christmas dealing with this kind of mess.

 

[Herself]

I just want to thank the people here on this thread who've helped me. I did as JP suggested and headed over to http://jqueryhelp.ning.com/, where TJ, who has been FANTASTIC, helped me out with a fix to hack the new html editor and strip out the html before it's posted.

 

Of course, this isn't a permanent solution, as the editor still appears but doesn't work, which is confusing users, and sooner or later someone will figure out how to get past the javascript, so I would really like Ning to sort this out properly...

 

But until then, THANK YOU SO MUCH to TJ, you've saved my life!!!

[TJ @ jQueryHelp]

You're welcome!  I'm glad I was able to help you with this.  :-)

Best wishes!

"TJ"