Video Embed issue using Extra Fields!

[arivederchi +]

Hello Folks!

I was excited to learn today that you could use extra fields to allow embed of videos. I followed the instructions in the extra fields documentation word by word but I don't seem to be getting it to work.

1. I set up the text option with multiline field

2. In checkout settings I added the html tags below:

<b><strong><p><param><embed><object></param></embed></object><iframe></iframe><script></script>

3. When creating a listing, the extra field shows up just fine, so I inserted a embed code that I grabbed from YouTube. Below is the one I used:

<iframe title="YouTube video player" width="480" height="390" src="http://www.youtube.com/embed/IytNBm8WA1c" frameborder="0" allowfullscreen></iframe>

Finally, after I submit the Ad to go live, I go to view the video to see what it looks like and all I see is the embed code that I put in initially. The extra field seems to be showing up but the embed code shows up instead of the video.

I hope someone can point out what I'm doing wrong and hopefully point me in the right direction.

Thanks!

[seymourjames +]

Have you actually done what it tells you to do?

Your list is wrong from what I can see.

But why would you do it this way with a module available which gives you more flexibility. You are probably a bit restricted in where you can put it using an extra field. You should also be aware that you are allowing code to be placed into your adverts in general. There is a good opportunity to spam your site with links and insert scripts.

[arivederchi +]

Trust me, I'm considering the mod but when one is strapped for cash, it's nice to know what other options are available at least for the meanwhile. I recently was laid off from my job and I can't justify spending $30.00 dollars at the moment.

I love the flexibility Larry's mod gives and I would much rather go that route but for now until I get another job I sure would appreciate any help to get the extra field to display YouTube videos.

You said the list I added in the Allowed HTML Tags box was incorrect, would you be so kind to tell me what I did wrong. I would appreciate it very much.

Thanks!

[seymourjames +]

I don't think you need </enoftag> by the way .

Well I just tested on version 4.2.1 and it puts in the code as you say. I tried both the new iframe method and the older embed method. Hopefully Blair will pick up on this for the next version. It may be something we are both doing wrong.

[Blair +]

It's been added to the bug tracker.
Thanks for bringing it to our attention.

[seymourjames +]

I was about to do that. I wanted to check again it was not me doing something wrong.

[John Snyder +]

If you really want to use the extra field system to add videos you could always take the url as the extra field value, then add the video embed code to your template. Personally, I'd use the module that was already built with this functionality.

Allowing HTML will also allow them to put the video in the description or etc, I would highly discourage this because 4.2.2 has a more aggressive filter and would more than likely remove it even if you allowed HTML like embed or iframe.

[Mike-N-Tosh +]

I agree completely with John on this.

Sometimes you have to think like a hacker to prevent hacking!

Although allowing these types of tags may achieve your goal, this also opens up everything and anything to be embedded, especially iframes. What would stop a hacker from putting an iframe that goes to their website that injects malicious code such as malware, spamware and/or porn???

[arivederchi +]

Thanks for all the valuable information guys! I will look into getting the YouTube mod.