In general though, I'd disable html as it just begs you to get hacked. Just b lock all of it for safety's sake; the populace can deal with the crappy board codes to do what they need.

Also, gif's have to be told to loop themselves when you create them. Or at least, they do in Animation Shop Pro.