Home Suggestions and new ideas Add custom Banner Type+Code

Add custom Banner Type+Code

3 years ago submited by TomTom
There is a serios problem i found in PAP4.

<script> is including a php file. Did you know that a serios Website owner won't ever include such code in their website because of security ? Nor me would do that, it is to much risk.

Instead you should add the fuction to be able to define own banner types.
on page: "index.php#Congif-LinkFormats" i only can find text, banner and flash predifined, but its not possible to add a new bannertype and change the code on it.

please fix this, as we was happy about the new pap version, but disapointed to see such a important topic has not been improved enough = modifying banner code / types

additionally

3 years ago TomTom
When adding customer Banner Type would be possible, i would add this kind of:

javascript which prints a iframe tag including a fixed with and hight for giving secure on the size.
= size is fixed and means less risk for oversized/errored banners
= if javascript is not activated, it will show a SEO Link instead (Very important for google)

============================

For the Banner integration there are several requirements for serios advertisers. you should ask yourself following questions::

- is the Bannercode able to handle changed Banners so that a modified Banner will auto-update on the Affiliates Website?
- is the Bannercode secure enough to get accepted by the Affiliate (Note that BIG Websites do care alot about security)
This includes no risk of injection, destroying the Website look with including a 2000pixel Banner for example. With the current PAP4 code it would be possible to display a width=4000 height=4000 pixel gif file, which would cause damage to the affiliates website.
- is the code SEO friendly ? (The current code isnt optimized for SEO, the <script> tag just will be ignored by google because google can not read javascript)

No security problem, but small ditto on the feature

3 years ago John Crenshaw
About the "serious problem," this is not any more of a security risk than including a .js file. In fact, by the time the <script> tag gets a hold of things, the file extension is completely irrelevant. You could call the file banner.lol, banner.bob, banner.foo, banner.bar, or anything else and it's all the same. The server that provides the file can be told to pre-process anything as PHP or any other serverside language, regardless of the file extension.

As for custom banner types, I'd like to see this too.

Imlemented in version 4.2

3 years ago Michal Bebjak
Hi,

this feature is implemented and will be available in version 4.2 which will be released in first days of next week.

Michal Bebjak
QualityUnit