Unfiltered MU

Description

Unfiltered MU gives Administrators and Editors the unfiltered_html capability. This prevents WordPress MU/WordPress 3.0 multisite from stripping <iframe>, <embed>, etc. from these users’ posts. Authors and Contributors do not get this capability for security reasons.

The plugin can either be used globally for your entire MU site, or it can be applied on a blog-by-blog basis.

For WordPress MU or WordPress 3.0 multisite only. Regular WordPress already offers this feature and does not need this plugin.

Warning! This is a very dangerous plugin to activate if you have untrusted users on your site. Any user could add Javascript code to steal the login cookies of any visitor who runs a blog on the same site. The rogue user can then inpersonate any of those users and wreak havoc. If all you want is to display videos on your WordPress MU blogs, use the native Embed Support, Viper’s Video Quicktags or any of the other video plugins on WordPress.org.
If you use this plugin your site will be hacked in one way or another if you allow anonymous users on the Internet to create blogs on your site. It’s very dangerous.

Are you still 100% sure you want to use this plugin?

Installation

If you want to enable this feature on all blogs on your MU site:

  1. Place the unfiltered-mu.php file in your wp-content/mu-plugins/ directory. That’s it. Removing the plugin will remove the capability.

If you want to enable this feature on a blog-by-blog basis:

  1. Place the unfiltered-mu.php file in your wp-content/plugins/ directory.
  2. Activate this plugin for those blogs on which you want this feature enabled or enable it sitewide with the “network activate” feature. Deactivating the plugin will remove the capablitiy for that blog.

Reviews

Working with WordPress 4.9.8

I have a multi-site installation with WordPress 4.9.8. A user setup as an “administrator” wasn’t able to put iframe (google maps) and script tags (embedded hubspot form) in the WYSIWYG editor without them being stripped out. Installed this plugin, all is good now.

I’m not surprised it still works even if it hasn’t been updated in years. It’s made by Automaticc. Automaticc made WordPress. This isn’t some third party garbage plugin.

working ok

It works (tried on a multisite with many P2 instances).

The main problem is that people successfully using any plugin do not vote &/or comment it to let know the real status of them.

Still works! March 2017

I love when plugins are so cleanly written and do their trick without hassle. Especially after 8 years of no updates. Though they should submit an update just to remove the “2 years old” warning…

Nice!

Looks like this plugin still does the trick. If it doesn’t work for you or you’d rather not use a plugin, getting this functionality can be as simple as calling:

kses_remove_filters()

For more info, check out my blog post about how to disable kses. (http://endorkins.com/2013/08/27/disable-wordpress-kses-to-prevent-html-filtering/)

Read all 10 reviews

Contributors & Developers

“Unfiltered MU” is open source software. The following people have contributed to this plugin.

Contributors

Translate “Unfiltered MU” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.