User Profiles: Is there a bug in 2.02?

Does no one know why this is happening? Is there a way to fix it please?

Thank you
Karl

Well after some digging I came across this post:

https://www.ads-software.com/support/topic/56050?replies=5

It appears this is a bug that has yet to be fixed in 2.02. There is a patcth but for some reason it looks liked it was ignored.

Thanks
Karl

Probably wasn’t added to 2.0.2 because it was a security release. Maybe look out for it in a future release, it’s been tagged for 2.1; not a high priority item either in comparison to other bugs by the looks of it.

Anyone know if this has been included in 2.0.3? You could try it yourself, I think from memory that 2.0.03 Beta is floating around somewhere, but remember that it’s BETA software.

Hmmm this wasn’t fixed in 2.03.

Karl

Just curious – what do you mean the HTML doesn’t render? I’m seeing everything just fine – looks like the rest of your site…

So on my profile, you don’t see any HTML? I do.

Thanks
Karl

So on my profile, you don’t see any HTML? I do.

https://www.elyonline.co.uk/archives/author/kb/

Thanks
Karl

Did you turn off the wysiwyg editor?

samboll, yes.

I would think that allowing HTML in user profiles would be a security risk, potentially allowing for XSS vulnerabilities.

Hmm…strange stuff. I did a test post on my blog with the html and it worked fine.
One other possibility – do you have the box unchecked for “WordPress should correct invalidly nested XHTML automatically” ?
admin -> options -> writing

Why don’t you add the thml tags on the theme/template, that way it would be more consistent from profile to profile without allowing the users to eneter html?

Regards, D

Hi all,

I need to point out that this is only a problem on the user profile box in ‘users’ in admin and not regular posts.

Thanks
Karl

I reverted back to 2.02 as I could not fix this peroblem.