Empty PMs linked to hacking incident.

[Bell]

Disabling images in pm's then is really the only other option to protect everyone. Stefan has asked and I've advised its the best course of action unless we can reenable the option to turn imaging on and off in pm's.

[linkrulz4]

To disable html in PM's the old fashioned way, please do the following procedure:
close graal before doing anything
1) go into your Graal folder.
2) find control2config.txt
3)locate the line nohtmlinpms=false
4) change the value to true.
5) save and exit
7)start up graal
8)be sure to check the txt file after graal loads to see if it changed back or not

Disregard this post. That's for RC.

[Crow]

Originally Posted by linkrulz4

To disable html in PM's the old fashioned way, please do the following procedure:
close graal before doing anything
1) go into your Graal folder.
2) find control2config.txt
3)locate the line nohtmlinpms=false
4) change the value to true.
5) save and exit
7)start up graal
8)be sure to check the txt file after graal loads to see if it changed back or not

That's the config file for RC. It does not apply to the client at all.

[linkrulz4]

Originally Posted by Crow

That's the config file for RC. It does not apply to the client at all.

Ah, I see.

In that case, where is the command to shut off this located, perhaps?
"File download: http://pics.fort90.com/cdi_link.gif (size: 43364) done"

On a side note, putting:
nohtmlinpms=true
nohtmlimages=true
into the game_config did alter the way images were presented, just a tad. Doesn't stop them from loading, though.

[Crow]

As far as I'm aware, it's not possible to completely disable HTML in PMs anymore.

[linkrulz4]

Originally Posted by Crow

As far as I'm aware, it's not possible to completely disable HTML in PMs anymore.

That seems rather faulty. There has to be a way, somewhere.
I swore in the old versions of the game there was an option for it. Has anyone tried applying that to the current v6?

Also, when I look in the PO gui files there seems to have been an attempt to insert a switch (at least the text for one) into the GUI to turn off html in pms.
I can't find it anywhere in the actual GUI though.

[Crow]

There was, but it's not the same anymore. Current HTML parsing is done in GS2's GUI system.

[linkrulz4]

Originally Posted by Crow

There was, but it's not the same anymore. Current HTML parsing is done in GS2's GUI system.

Well, I'm stumped then!

[skillmaster19]

Should probably censor some of the html code so someone else doesn't start doing it too.

[cbk1994]

Originally Posted by skillmaster19

Should probably censor some of the html code so someone else doesn't start doing it too.

I would rather just see a whitelist of image hosts (including u.graalcenter.org !!). Message codes should be disabled as well. Stuff like "#1" is just annoying, while "#a" in HTML can be a real problem (since it lets you easily map IPs -> accounts).

[Tigairius]

I vehemently disagree with the idea of disabling displaying images in PMs. I do agree with the idea of getting rid of #a, etc. though.

Having HTML and allowing images to be displayed opens up so much customization in PMs for players. I see players using it all the time to advertise items they're selling on Era and other servers by showing the item's icon and stuff.

Players could possibly have the option to disable the <img> tag linking to external sources maybe (that would mean if you tried to display an image that exists on the server it would still work, so players could link to item icons, etc), but leave HTML alone.

I do not want to see images being removed from PMs though.

[Crono]

era must have some creative folk because i've never seen it used on zodiac or era. i like chris' whitelist idea.

[cbk1994]

Originally Posted by Crono

era must have some creative folk because i've never seen it used on zodiac or era. i like chris' whitelist idea.

It is used a lot in masses. Mostly I find it annoying, but I too wouldn't like to see it disabled entirely. 6,436 uses in masses since September 2011. Stuff like...







(just a few off the top)

[Hezzy002]

The solution is obviously to download images to the game server as a proxy and then send them to the client.

[Crow]

Originally Posted by Hezzy002

The solution is obviously to download images to the game server as a proxy and then send them to the client.

Indeed. It's the only logical approach to this problem.