Last week I discovered a worrying feature in the modems (or is it in the telerik editor?).

In this thread, PsykX tried to post his connection string, but it did not appear in the posting after submission.

In his next message, he writes: Wow, my code won’t even appear up there... This is one of the strangest forums I’ve seen :-\

On page 3 of the thread, I tried to enter the following path in my posting:
~\Portals\<portal id>
After submitting, the portal id part had dissappeared from the posting. In my next posting, I tried the following string in the text:
<hello DotNetNuke>
This time, the text did not disappear. Since it seems I cannot repeat this error, I did not submit it to the bug reports. But it is something I will delve deeper into. If the text only disappears, it may be an annoyance, but if the text gets interpreted somewhere in the process as markup, there may be a security issue behind this...

However, I found a second issue. It may be related, or it may not be related, I have no idea.

Last week, I wanted to review the fundamentals of skinning in DNN5 and I went back to this post from Timo Breumelhof. I kind of remember it was contained plenty of code examples. Have a look. Is this me? It seems like all the code is gone. ?Que pasa?

---

____________________________________
The one-eyed in the land of the blind.

First of all, this would then make it an issue for Telerik. Only when pasting is the key.This is not completely true. There are more circumstances where text can be misinterpreted for markup code, for instance when you edit a posting to correct an unrelated error

This cannot be by design?

And would the disappearance of code in Timo Breumelhof's posting not be related?

PS: Can the original of this posting be found somewhere else, in a blog or so?

---

____________________________________
The one-eyed in the land of the blind.

 That should take care of  the security concerns.

It still sounds like sloppy design. And there is more. The fate of the html-like markup in Timo's posting has nothing to do with the html editor. I bet, if you go look in the database tables for the forums and search for this particular posting, you will find that everything, all the disappeared code is still there. There is no reason why that should have changed; it once was there for all to read. It is what the forum module does with this code that has changed.

When I wanted to edit my first posting (to change modem to forum in the first line and to correct some gramatical sloppiness at the end), <portal id> was no longer there in the editor. I decided not to save this version of the posting (it would ultimately prove nothing) and let the errors go uncorrected.

---

____________________________________
The one-eyed in the land of the blind.