How to solve FILE BBcode security issue in older VW versions?

**Alan_SP** · October 15, 2014

I'm referring to this news: https://www.vaultwiki.org/articles/158/?postid=15711

I looked and don't have Syntax Manager, or I couldn't find it. I have Wiki Code manager (VW 3.0.20) in ACP, under Vault Wiki optins. But there I don't see FILE BBcode, I have Special BBcode, maybe it is what you're talking about?

Do I need to disable Special BBcode with Code manager completely (set all options to No)? Would that be a way to solve this, as I at the moment don't want to upgrade my VW to v4 on my live site.

Can you make more specific instructions what we should do?

**pegasus** · October 15, 2014

Note that disabling the BB-Code will break all uses of it. If you use it, I only recommend disabling it if you plan to upgrade soon.
Otherwise, if you use the BB-Code, I would recommend paying for an upgrade service and we can apply custom changes to the source code for whatever version you have.

To disable the FILE BB-Code:

In older VaultWiki versions, check your Namespace Manager first.
There should be a section for namespace functions near the bottom of the page.
If there is nothing selected for "Image namespace", then you are okay, and don't need to take further steps.

Look for the selected namespace in the list of namespaces above it. There should be a BB-Code tag filled in.
If there is no BB-Code tag filled in, then you are okay, and don't need to take further steps.

Note the BB-Code tag name. This is the tag you need to disable in Wiki Code Manager.
In Wiki Code Manager, edit that BB-Code. For the settings "Parse this BB-Code in ...", set them both to No.
Save.

This will disable the BB-Code.

**fj123** · October 15, 2014

Can you tell us exactly how to disable it in current version too? I am on the edit screen and see several BB code references, do I have to change each one of the to No? or just the top one that says: Place BB-Code in the Wiki Code group?

**fj123** · October 15, 2014

Also, would just turning the wiki to OFF take care of it, or does it still have to be disabled?

**Alan_SP** · October 15, 2014

@pegasus: Thank you, this explains things much clearer. Now I know where to look and for what.

I don't use anything for Image namespace in Namespace functions, but if I do, your info helps me what to find and disable.

**pegasus** · October 15, 2014

Originally Posted by fj123

Can you tell us exactly how to disable it in current version too? I am on the edit screen and see several BB code references, do I have to change each one of the to No? or just the top one that says: Place BB-Code in the Wiki Code group?

The settings that say "Parse this BB-Code in ..." need to be disabled. Those settings control whether the BB-Code works or not (the others control other aspects).

**fj123** · October 15, 2014

Originally Posted by pegasus

The settings that say "Parse this BB-Code in ..." need to be disabled. Those settings control whether the BB-Code works or not (the others control other aspects).

Thank you!