Guestbook script that does not support HTML?

[Cliff R.]

Hi,

I have a few sites that have guestbooks, using the standard Perl
script from Matt's Script Archives. Lately many unscrupulous SEO
companies have been posting lots of links to their stupid client
sites, and watching the guestbooks to constantly have to remove these
ads is been a real pain. I'd like to switch it to one that doesn't
support HTML, so they can't leave their HTML links and hopefully will
then give up. Can anyone recommend a script like this, preferably one
that will fit right in to replace the Matt's script? Thank you!

Cliff

 

[Jeff Thies]

Hi,

I have a few sites that have guestbooks, using the standard Perl
script from Matt's Script Archives. Lately many unscrupulous SEO
companies have been posting lots of links to their stupid client
sites, and watching the guestbooks to constantly have to remove these
ads is been a real pain. I'd like to switch it to one that doesn't
support HTML, so they can't leave their HTML links and hopefully will
then give up.

Not sure about the script but it is easy to take this out with perl.
Backtrack several days and look at the thread titled "no html".

You'll want to do that if you have any sensitive information stored in
cookies (username/password). This exposes "cross site scripting"
security holes.

A simple regex can remove tags:

$input=~s/<.*?>//g;

or the tag pair plus its contents:

$input=~s/<.*?>.*?<\/.*?>//g;

Of course, if you knew much about perl, you wouldn't be using Matts
Script Archive which even Matt has discredited!

Cheers,
Jeff

 

[cefm]

I use purple Yin Guestbook.

It has an extensive backend, Uses a flatfile database, and is totally 100%
custimisable, allows 5 extra questions, IP Banning, bad word strings, etc...

Their site is http://www.aznlink.com/purpleyin/ and they have an example on
there site my guestbook is http://www.frees-melvin.ca/guestbook to show you
that it is totally custimisable. It requires PHP support and to 777 a couple
files.