https://www.icyphoenix.com/viewtopic.php?f=35&t=5596&p=37532#p37532
-----------------------------------
novice programmer
Thu 19 Mar, 2009 18:06

Re: Why HTML Desable?
-----------------------------------
Yep, security.

They can take your user and pass, insert iframes vith viruses, spyware, keyloggers..... if it is disabled.

[b]DWho[/b], it is less problably they take php files or touch the DB with HTML code as HTML is client side, but if PHP is injected.... they can even crush both client and server


