Foren

Disable link for names in comments

Rob Hall, geändert vor 11 Jahren.

Disable link for names in comments

Junior Member Beiträge: 47 Beitrittsdatum: 30.11.11 Neueste Beiträge
We are working with Liferay EE 6.1 GA1 and have comments enabled on various articles. However, when a user posts a comment to those articles, it attaches their picture (if available) and name in profile links that expose a security hole and gives the user access to the Control Panel and other Liferay features. Is there a configuration setting to disable the link (i.e. just show the commentor's name without a link to their profile) or can something be overwritten w/ a hook to accompllsh this?
thumbnail
Samuel Kong, geändert vor 11 Jahren.

RE: Disable link for names in comments

Liferay Legend Beiträge: 1902 Beitrittsdatum: 10.03.08 Neueste Beiträge
Yes, you should create a JSP hook. Specifically, you'll probably want to look into /html/taglib/ui/discussion/page.jsp
Rob Hall, geändert vor 11 Jahren.

RE: Disable link for names in comments

Junior Member Beiträge: 47 Beitrittsdatum: 30.11.11 Neueste Beiträge
That worked. I created a hook for page.jsp and replaced this

<liferay-ui:user-display
userId="<%= message.getUserId() %>"
userName="<%= HtmlUtil.escape(message.getUserName()) %>"
displayStyle="<%= 2 %>"
/>

with
<% String userName = message.getUserName(); %>
<b> <%= userName %> </b>
thumbnail
Mazhar Alam, geändert vor 11 Jahren.

RE: Disable link for names in comments

Regular Member Beiträge: 191 Beitrittsdatum: 25.11.11 Neueste Beiträge
Helpful post!!!