Title: Filtered HTML for Editors
Author: Andrew Nacin
Published: 2010 年 12 月 31 日
Last modified: 2010 年 12 月 31 日
---
搜尋外掛
這個外掛**並未在最新的 3 個 WordPress 主要版本上進行測試**。開發者可能不再對這個
外掛進行維護或提供技術支援，並可能會與更新版本的 WordPress 產生使用上的相容性問題。
# Filtered HTML for Editors
由 [Andrew Nacin](https://profiles.wordpress.org/nacin/) 開發
[下載](https://downloads.wordpress.org/plugin/filtered-html-for-editors.zip)
* [詳細資料](https://tw.wordpress.org/plugins/filtered-html-for-editors/#description)
* [使用者評論](https://tw.wordpress.org/plugins/filtered-html-for-editors/#reviews)
* [安裝方式](https://tw.wordpress.org/plugins/filtered-html-for-editors/#installation)
* [開發資訊](https://tw.wordpress.org/plugins/filtered-html-for-editors/#developers)
[技術支援](https://wordpress.org/support/plugin/filtered-html-for-editors/)
## 外掛說明
By default, users with Administrator or Editor privileges are allowed to publish
unfiltered HTML in post titles and content. WordPress is, after all, a publishing
tool, and people need to be able to include whatever markup they need to communicate.
Users with lesser privileges are not allowed to post unfiltered content.
Unfiltered HTML is potentially dangerous. It allows users to include JavaScript,
object embeds, and other code that has the potential to be malicious. The capability
should only be given to trusted users. By default, WordPress provides the unfiltered
HTML ability to Editors and Administrators.
Use this plugin to prevent Editors from publishing unfiltered HTML posts. Administrators
will not be affected.
For more information, check out the [FAQ](https://wordpress.org/extend/plugins/filtered-html-for-editors/faq/).
## 安裝方式
For an automatic installation through WordPress:
1. Go to the ‘Add New’ plugins screen in your WordPress admin area
2. Search for ‘Unfiltered HTML for Editors’
3. Click ‘Install Now’ and activate the plugin
Or use a nifty tool by WordPress lead developer Mark Jaquith:
1. Visit [this link](http://coveredwebservices.com/wp-plugin-install/?plugin=filtered-html-for-editors)
and follow the instructions.
For a manual installation via FTP:
1. Upload `unfiltered-html-for-editors/unfiltered-html-for-editors.php` to the `/wp-
content/plugins/` directory
2. Activate the plugin through the ‘Plugins’ screen in your WordPress admin area
To upload the plugin through WordPress, instead of FTP:
1. Upload the downloaded zip file on the ‘Add New’ plugins screen (see the ‘Upload’
tab) in your WordPress admin area and activate.
## 常見問題集
What problem does this plugin solve?
Unfiltered HTML is potentially dangerous. It allows users to include JavaScript,
object embeds, and other code that has the potential to be malicious. The capability
should only be given to trusted users. By default, WordPress provides the unfiltered
HTML ability to Editors and Administrators.
Use this plugin to prevent Editors from publishing unfiltered HTML posts. Administrators
will not be affected.
Why are some users allowed to post unfiltered HTML?
By default, users with Administrator or Editor privileges are allowed to publish
unfiltered HTML in post titles and content. WordPress is, after all, a publishing
tool, and people need to be able to include whatever markup they need to communicate.
Users with lesser privileges are not allowed to post unfiltered content.
What about Multisite?
This plugin won’t help you. If you’re running a WordPress network, then only super
administrators can publish unfiltered HTML. All other users are considered untrusted,
since they can be administrators on sites they register.
There exists another plugin called [Unfiltered MU](https://wordpress.org/extend/plugins/unfiltered-mu/)
that will provide the unfiltered HTML ability to editors and administrators in multisite.
This can only be used in a closed network where these users are trusted.
How do I deny unfiltered HTML to everyone?
You can add `define( 'DISALLOW_UNFILTERED_HTML', true );` to your `wp-config.php`
file. This will affect administrators as well. If you are running multisite, this
will affect super administrators. If you do this, then this plugin will not have
any affect.
Why do my video embeds break?
This is a perfect illustration of the careful balance required between security
and functionality. WordPress is, after all, a publishing tool, as said above.
Video embeds, such as those with `