10
yep, youv'e got a point - html editing might be a security hazard, but so does a lot of moduls I saw here...
But the way I use wysiwyg mostely, is not giving it to plain users, but to the editors/moderators.
if you want to controll users with htmlarea, you may "give them" a siplier version of the script without "code mode" and without images/files manipulation.
and if you want to go some more into it - look @
LUIS's addon for striping WORD code on the fly (paste comm.) - it can be used for whatever code you need to strip.
every good cms uses wysiwyg !!!
xoops simply need to choose it's wysiwyg, choose how to limit the use of it, the option it gives and so on...
The net is running ahead, us spiders can't stay behind