Hello Lee and Joe,

I think I posted something similar to this earlier concerning the need to design a secure environment in which people could post articles on our web site without giving them the ability to be able to do anything that could cause malicious code to be entangled in our site.

I recently learned about fckeditor being a seperate peice of open source software that has been integrated into modules via the provider folder in dotnetnuke.

I have also learned how to edit toolbars and given different tool sets to different people though I don't know a log about all that is configurable with the fckconfig.js and fckconfigsecure.js files.

What I am wondering is how would you suggest I design this experience so that people can either write or import articles without the worry of malicious code?

I had thought of customizing a toolbar for registered users that consisted of all the toolset asets as default toolbar has accept source, flash and maybe image (haven't decided on that one yet).  I figured I give them the paste from word, bullet points, numbers, etc...

What toolbar items would be the safest and also how does this forum strip javascript code written into it.  Is it all part of the forum module?

I have tried the myprofile module but that isn't exactly what I am looking for as it limits you to only having one page and not being able to have 2 or 3 pages (i.e. one for main article, one for picture gallery, etc...)  Is their a module free or otherwise that you would suggest be used for this purpose as now I know any module that lets you write text in it more than not integrates this third party open source fckeditor with it by pointing to it via a registered entry to texteditor.ascx. 

Thanks,

Bo

Hello,

The forum module does this automatically and it's part of the forum module code.

Yes you could use the FCKEditor to create a basic toolbar such as Bold, unordered list etc. but it will not necessarily strip out JavaScript code, unless there is a setting within the FCK editor that I am not aware of.

It may also be worth your time to look at the Telerik WYSIWYG editor, you have to pay for it, but it looks as though it could cover your needs:
http://www.telerik.com/products/asp...rview.aspx

http://www.telerik.com/products/dnn...rview.aspx

hello thanks Lee for your input.

I just got done talking with the rad editor people and found that they charge $800 for their suite for DNN environment. You can't get the Rad editor alone you have to get it with some of their other tools and beings we are non profit we can get a discount but I surely wasn't expecting the price range, wow.

Any way This does seem to solve our issue but it seems like some other module can do it cheaper. They do have more of the office 2003 feel maybe even an adobe feel in that their is such a thing as docking and undocking toolbars with their product where I don't think this can be done with fckeditor but I might be wrong.

You can turn off source and set allow scripts to false which provides the security I am looking for but I might settle with the forum module at least for now as it seems t have the kind of functionality I am looking for though not as intuitive mabye as this rad editor thing.

If you happen to know of nay other module that holds a secure way of letting others (besides your own admins) add content that is around even at max $200 in price let me know. Thanks for your help in this whole thing though

Bo