What html can my users use in the widget and is there not a way to disable a single widget such as the text/html widget?
I don't want them posting any adverts or any malicious code.
You can disable the customization of their profile and dashboard so that they wont add html widgets.
Thank you Aliia for your response. Jason, for security purposes you can disable custom HTML in admin panel>>settings>>user settings>>"Content input" tab.
Also, when you are customizing site pages as admin, you can disable javascript.
+1 Purusothaman.
You can restrict users from customizing their dashboards in admin panel>>page&menus>>user dasboard/user profile>>uncheck "Allow users to customize this page" checkbox.
Thank u...go back again to topic...
This is not related to using html in blog or forum.