search

jreklund / php4dvd

php4dvd is an open source php/mysql powered movie database. Catalog your video collection with ease. Automatic update of information and images.
GNU General Public License v3.0
83 stars 43 forks source link

Custom fields #37

Open jreklund opened 6 years ago

jreklund commented 6 years ago

As discussed in #35; add the ability to add customized fields:

Maybe:

kkayacan commented 6 years ago

Nice feature to have. And please add support for hyperlinks. Currently, personal notes field doesn't recognize urls as hyperlinks.

jreklund commented 6 years ago

At this time there are no HTML support in the fields. php4dvd don't utilize bbcode, markdown (like github) or similar "forum codes", as you need to be absolute sure they can't be used for XSS attacks.

There are some tools like HTML Purifier that validates all HTML code so it dosen't include any security risks. But for now, I don't trust anything as there are no validator installed. Will keep it in mind for future releases.