Replies to This Discussion

Permalink Reply by David R on September 13, 2010 at 12:36pm

What is even stranger is that I changed one of my administrator's status to member-only. They are able to insert an "a=href" code snippet into their profile text box but still not the iframe code from my original post. Another member who has never been an administrator is not able to get either code string to Save, much less display properly in the same text box. Is this a Ning Support Question? I had hoped not, but it's looking more like it.

Permalink Reply by JenSocial on September 13, 2010 at 12:57pm

David,
There are security measures that Ning implemented, that prevent certain codes or scripts to be inserted on profile pages. They did this when all the heavy duty spamming was taking place. Pharmaceutical spammers/scammers were bringing down networks by hijacking profile pages. I'm not entirely sure what works, and what doesn't work. I would have guessed that only scripts would not have worked. You may want to pose this question on the Ning Creator site.
Best,
Jen

Permalink Reply by David R on September 13, 2010 at 1:33pm

Thanks again Jen. I understand the security issue and am grateful that they did this actually. But, the text box still says, "add html, third-party widgets..." so if they're going to do this, they don't need to mislead someone to think they can add certain scripts when they can't. I've sent a support ticket to Ning in this one also. - good day.

Permalink Reply by JenSocial on September 14, 2010 at 12:35pm

I agree. Since I haven't done my homework on this one, when you find out exactly what can and cannot be added, would love it if you shared that information with us on JenSocial.
Thanks,
Jen

Permalink Reply by David R on September 14, 2010 at 10:48pm

Ok now I'm really stoked. I pasted the widget code on my member profile page on your site (this one) and it worked fine. No problems at all. The same code cannot be saved in the same text box on my site unless I am signed in as an administrator. What gives? - David

Permalink Reply by David R on September 14, 2010 at 11:31pm

I'm starting to feel like a real geek. Using Chrome, I inspected the text box element on my profile page in your site and compared it with the same element on two profile pages in my site. One of the ones on my site was a regular member who has not been able to add the code widget to his text box. The other one was my profile page after I changed my status from Admin to Member. There is an interesting (if you're a geek) difference as noted below. This is the text box element on the member's profile page that will not accept the code.

This is the same element on my profile page where I have changed my status to "member" from Administrator but where it does accept the code. There are differences in the third line - this one omits editing_html_module and other than the string of "id=5%...." differences, the string that gets my attention is the last one that says hasdefaultcontent="true" on the one that doesn't work, and the one below says hasdefaultcontent="false". Text box element on my network and my profile page

Here is the same element on my profile page on Jen's Social Site. Notice that it also has the hasdefaultcontent'="false" string on the last line. Could this be the culprit, and how could one fix it? Text box element on Jen Social

Permalink Reply by JenSocial on September 14, 2010 at 11:46pm

Interesting, definitely. Although there isn't a feature for this specific thing: embed widget code, I find myself wondering if allowing members to add apps would make a difference:
/main/membership/controls
Best,
Jen

Permalink Reply by JenSocial on September 14, 2010 at 11:50pm

Here's one FAQ page I was trying to find for you yesterday:
http://help.ning.com/cgi-bin/ning.cfg/php/enduser/std_adp.php?p_faq...

Permalink Reply by JenSocial on September 14, 2010 at 11:51pm

Another discussion I think you should see, if you haven't already:
http://creators.ning.com/forum/topics/text-box-issue-on-individual

Although you're not trying to install javascript, the asp extension would cause a red flag. Maybe JenSocial wasn't updated, since the site's been around for several years?