Anyone else seen this?

Credit goes to Zach for spurring the research that lead to that code.

Adam’s last blog post… Author Exposed Reloaded Plugin – Tonight’s Updates

A better way is to use the Wordpress Filter API. By default, wordpress uses a function called “wp_filter_kses” to strip potentially harmful content out of user descriptions (i.e., to prevent XSS attacks). You can find this by searching for ‘pre_user_description’ in the file wp-includes/default-filters.php.

You have two options:
1. Completely remove this functionality. This may be dangerous, but only if you let the general public create wordpress accounts, which it doesn’t look like you do. To do this, you can add the following to functions.php:

remove_filter(’pre_user_description’, ‘wp_filter_kses’);

2. Modify the allowed tags to include the ones you want to use. This will also modify rules for HTML tags in comments. There is plenty of info about this in google.

Raphael’s last blog post… Une bonne idée pour contourner la loi Evin

Tammy Hart’s last blog post… WordPress: How to Use Categories as Your Navigation Bar

Sal B’s last blog post… The Creative Brain Trust