Of course users can still upload files and post comments to the respective
urls directly, even with 'showattachments' or 'showcomments' set to 'no'.
These settings just tell the skin not to render the HTML, they don't affect
any privileges.
If you want to prohibit commenting, set the according ri
Sergiu Dumitriu-2 wrote:
>
> But you cannot prevent smart users from using images from other sources
> than attachments, as they can enter HTML tags.
Yes I can and I want to. To achieve this, my skin only renders
$doc.EscapedContent.
--
View this message in context:
http://www.nabble.com/Res