How do I disable the show HTML source button.

I need help on where I can disable or even remove the show HTML source code button.

I only want people to use the editor feature to edit the page and not manually type in HTML codes into the source code.

Any help is appreciated.

Thanks in advance. :mrgreen:

Sun, 02/10/2008 - 11:46

abbey478

Joined: 31/10/2007

Posts: 7

Re: How do I disable the show HTML source button.

Open fckconfig.js. Around about line 105 or so, you will find

FCKConfig.ToolbarSets["Default"] = [
['Source','DocProps','-','Save','NewPage','Preview','-','Templates'],
['Cut','Copy','Paste','PasteText' .... etc

Simple remove the word 'Source', (Including the comma and apostrophe)

Abbey

Sun, 02/10/2008 - 17:56

xengvang

Joined: 17/08/2007

Posts: 7

Re: How do I disable the show HTML source button.

Thanks for the help.

That solved my problem. Once that is disabled, do you think people can still find a way to type in HTML code and make it work without typing it into the source code since that has been disabled?

Thanks again.

Tue, 03/24/2009 - 07:01

codythecomet

Joined: 24/03/2009

Posts: 2

Re: How do I disable the show HTML source button.

I was hoping to install this software on the boards I use, but security is of paramount concern. Can someone verify for me that taking out the source button will eliminate the possibility for users to input their own HTML?

Wed, 11/27/2013 - 11:27

(Reply to #4) #5

JCabello

Joined: 27/11/2013

Posts: 1

Absolutely not, they won't

Absolutely not, they won't only be able to forge the contents of the CKeditor instance simply using the browser, they can even add a breakpoint to your config file right after the point where you exlude the source button and manually add it back with a console command. So they will have the source button.

Security must be ALWAYS implemented server-side.