CES Parser Permissions

[thincom2000]

By "the product's plugin", I meant the one this thread is for.

[OsideRida06]

By "the product's plugin", I meant the one this thread is for.

Oh yeah I knew that!. LMFAO! Thanks bro. It is now working perfectly. Thanks for the custom code!

[7lanet]

But it is known to cause html security vulnerability to penetrate??

What is the solution

[thincom2000]

In truth, the danger is always there, but with this mod you can allow HTML to your trusted Usergroups only.

[Leo Brazil]

Also the vbadvance is also not allowing the bb code. These are the last two things and then this is installed perfectly. It would be great to a fast response again.

I am using vBadvanced CMPS.

Gee....I should have read this after busting my brains out trying to find out what was happening to my forum.

In my case, everything was running fine but when I upgraded from 3.6.8 to 3.7.2 and upgraded vBadvanced from 3.0.0 to 3.0.1 all BB Codes and Smilies was showing un-parsed on the News Module.
Even checking the original thread this News Module are linked to, BB Codes and Smilies were un-parsed to visitors. Even if I disable CES Parser Permissions I could see BB Codes parsed correctly, I had to edit and save (withou changing anything) for BB Codes to be parsed correctly.

I'm still trying to figure out a way to fix this because this hack is great and my site can't live without it.

[thincom2000]

In all honesty, the permissions used should be the poster's permissions and not the current user's permissions. These can be easily confused, but it's an important point to remember.

[Leo Brazil]

In all honesty, the permissions used should be the poster's permissions and not the current user's permissions. These can be easily confused, but it's an important point to remember.

I have to confess this is confusing for me. I got your idea but still a little confused. Do you mind in streching this thing up a little more just to make everything clear ?

Tks

[marcossalazar]

Hello,

I have created an RSS feed from my blog to be posted in a forum and the HTML (such as hyperlinks) are not being parsed when the thread is being created. However, when I go in and edit the post and simply resave it, it parses. I disabled the mod and it is working fine that is, the

More... ({feed:link}) in the rss manager is parsing with the mod turned off, but not when turned on. Looks like a bug.


Thanks,

Marcos

[thincom2000]

I cannot reproduce this behavior on my forum, seems to work fine. What are the mod's permissions for the user you selected to post the RSS feed to the forum?

[marcossalazar]

Yes on all CES Profile / Social Message Permissions except Allow HTML in Profile Fields and No on all project tool permissions.

[marcossalazar]

Hey thincom2000,

I just installed the VB Blog on my forum and the BB Code was not parsing even though I had all the setting for it to. I then disabled your Mod and the BB Code in the Blog works. So there is something within the mod that is preventing BB Code in the VB Blog from parsing when it is enabled. :eek:

Marcos

[thincom2000]

For blog issues, please see the previous page in this thread.

[marcossalazar]

For blog issues, please see the previous page in this thread.

Worked perfectly! You are great!

[Spank]

Hi I want to be able to parse html for a custom field in my staff.php page, any ideas how I go about this?

[thincom2000]

Hi I want to be able to parse html for a custom field in my staff.php page, any ideas how I go about this?

I would need some (or a lot) more details about how you are doing this.

[Spank]

I'm using meet the staff hack, which is a better staff page, I've got it set to call field5 to display on the page.


<if condition="$user['field5']">
<span class="shade">$vbphrase[field5_title]</span> $user[field5]
</if>

So I want html used in field 5 to be parsed.

[thincom2000]

Yes it becomes a problem when you start using the "field" versions. vBulletin has a nice method of cleaning these values and preparing them that also calls the hook member_customfields.

If you know what you're doing I would recommend modifying your mod to clean these values in this way before outputting them to the page.

[Spank]

oic, unfortunately I'm still a noob when it comes to coding. Thanks for the advice anyway. =)

[Warlord]

I'm running vBulletin? Version 3.6.8 and this hack doesn't seem to work for me.

My bbcode and html does not parse.

I've entered the profile field id's I want to parse in vBulletin Options-->CES Profile Fields, and updated usergroup settings. I can't figure out why it's not working. :(

[Warlord]

Just disabled it, seems it was stopping html in posts to stop working too.

I just want a few profile fields to allow bbcode. I thought this might work for me. :(

Any suggestions?

[Warlord]

Ok, I saw the fix in post #58 here (https://vborg.vbsupport.ru/showpost.php?p=1252480&postcount=58) which describes my problem, but I don't have anything called Advanced BB-Code Permissions hack installed and the closest thing I have to bbcode_parse_complete is bbcode_parse_start.

Any suggestions would be greatly appreciated, as I'd really like to get bbcode working in a couple of my profile fields.

[Warlord]

Well I went ahead and created a plug-in and just named it bbcode_parse_complete and dropped the fix code in there to see if that would work. No dice. :(

[Warlord]

I know thincom2000 already posted the problem it has with the vs-Interactive Profiles Hack in the first post but I just thought I would also mention that it seems to have a problem with vBAdvanced as well.

No html or bbcode work in the news threads it pulls from the forums for some reason.

[Warlord]

I know thincom2000 already posted the problem it has with the vs-Interactive Profiles Hack in the first post but I just thought I would also mention that it seems to have a problem with vBAdvanced as well.

No html or bbcode work in the news threads it pulls from the forums for some reason.

I'm an idiot. thincom2000 already posted the fix for this here (https://vborg.vbsupport.ru/showpost.php?p=1559040&postcount=241).

Great hack thincom!

[thincom2000]

... it seems to have a problem with vBAdvanced as well.

No html or bbcode work in the news threads it pulls from the forums for some reason.

I have attached a patch to the first post. Let me know if this works for you.

[Warlord]

Well my site is down at the moment, but I applied the fix in post 241 (https://vborg.vbsupport.ru/showpost.php?p=1559040&postcount=241) and it seemed to work just before my site went down. Cool that you have it as a product now though.

I did notice though that I had to enable html in profiles for any usergroup that I wanted to allow html in posts for though.

Again though since my site is down I won't be able to test your updated fix to see if it corrects this little quirk.

Bottom line though, your hack does what I wanted it to do. Thanks again. :)

[thincom2000]

The patch in post 250 is for vBulletin Blog. It wouldn't make any sense if it worked for vBa.

[Warlord]

Sorry I meant post 241 here (https://vborg.vbsupport.ru/showpost.php?p=1559040&postcount=241). (Edited previous post to reflect the correct post)

[thincom2000]

Okay. I'm glad you found that, because I couldn't XD

[nerofix]

Hello thincom2000 my friend :)
I still love your mod and now I got a question again =)

I am trying to put a custom profile field (multiple line textbox) directly into the memberinfo template (not into the about_me-block) and the BB-Code is not parsed then I saw.

Do you see a possibility to update your mod so BB-Code may be parsed outside blocks too?

Here's an example of the code I put into the memberinfo template:


<if condition="$userinfo[field13] != ''">
<div>
$userinfo[field13]
</div>
</if>


Would be very nice if you could do something to make parsing possible :)

And there's another thing I think you might be experienced enough to fix: The custom profile field also don't line-break in memberinfo template. You have a solution?

[punjabi.king]

there is a bug in shoutbox and postbit
im using 3.27.2 version can anyone help?

[nerofix]

there is a bug in shoutbox and postbit
im using 3.27.2 version can anyone help?

Only with some more information I think. What kind of bug?

[thincom2000]

The shoutbox fix is located somewhere in this thread. Just do a "Search this mod" for "shoutbox"

As for using raw custom profile fields, I know I have done this for some other members, but don't have a copy of the code myself. If they would be generous enough to post the plugin (member_complete) that I wrote for them, it would help some more people.

[nerofix]

Okay I got it,

I've wrote a new plugin in member_start and added following code:

if ($userinfo['fieldX'])
{
if (!is_object($bbcode_parser))
{
require_once(DIR . '/includes/class_bbcode.php');
$bbcode_parser =& new vB_BbCodeParser($vbulletin, fetch_tag_list());
}
$userinfo['fieldX'] = $bbcode_parser->parse($userinfo['fieldX'],0, true);
}

( X = number of profile field )

Works great in vB 3.7.3 :)

[thincom2000]

Not exactly the official fix, and I'm not sure if it uses the permissions correctly, but I'm glad you worked out something.

[nerofix]

I'm not a plugin professional, so this plugin might be not perfect that's right. I just thought that you perhaps could build a such or better plugin into your $vbulletin->options['ces_parse_fields'] .

:)

[punjabi.king]

its not working for me, the first bug is fixed as thincom2000 replied about shoutbox

but now im trying to let members embed youtube video
but whatever they enter stays the same intead of embeding... please help

[nerofix]

How do you try to embed the youtube video? With <embed> code or BB-code ?

Did you already checked the CES Parser settings in your vbulletin options? Remember to enter the profile field number of the field you want to be parsed.

[punjabi.king]

^ yeah i checked settings in vbulletion options
i want them to embed it using <embed>

do u have a solution??

[nerofix]

I'd have 2 solutions.

The first is not recommend do to higher security risk, but is your choice:

1.) Check your CES Parser Settings again and in the field "Banned HTML tags" remove the word "embed". Then save.

The problem here is that your users can now embed youtube videos, but also they can embed every other flash-applications which can be a security risk.

The second solution I use, ..

2.) Add new BB-Code:

Go Admin CP -> Custom BB Codes -> Add New BB Code

Title - YouTube
Tag - youtube
Replacement:
<object width="425" height="350"><param name="movie" value="http://www.youtube.com/v/{param}"></param><embed src="http://www.youtube.com/v/{param}" type="application/x-shockwave-flash" width="425" height="350"></embed></object>

Example - zvC8GpOL4Lk

Description - Use the movie code from the YouTube URL in your browser.
For example, http://www.youtube.com/watch?v=zvC8GpOL4Lk


-----------------------------------------

Now after adding the new BB-Code, just enter zvC8GpOL4Lk in your profile field and it should work.

[punjabi.king]

^ thanks but that's what i was trying and it didn't work....

[punjabi.king]

well didn't worked for me, so i had to unistall....
but anywayz thanks to nerofix and thincom2000 for your support....

[nerofix]

Both solutions doesn't work for you? That's a bit mysterious then :erm:

[punjabi.king]

yeah still waiting for thincom2000 to reply..
im kinda confused too, tried everything even through the template

[nerofix]

And embedding of other BB-Code like [img] works? Okay then wait for thincoms reply =)

[thincom2000]

EDIT: You already removed the EMBED code from the banned tag list, so I need to investigate this a little further. But it's possible that the unparsed embed is now saved to the post cache, so see if clearing that helps.

[punjabi.king]

may be its cuz im using 3.7.2

anyone else tested on 3.7.2 ???

[thincom2000]

I'm running it on 3.7.2 ... XD

[nerofix]

I'm running 3.7.2 as well :)

Thincom, I need a solution for the plugin code in this reply (https://vborg.vbsupport.ru/showpost.php?p=1607601&postcount=284) ..

Special characters like "&" or "<" or ">" are getting transformed in my fields to html code like &lt;

You know a solution?

[thincom2000]

This should do it. Your member_complete plugin should look like this:

require_once(DIR . '/includes/ces_permissions.php');

if (FILE_VERSION >= '3.7.0')
{
$userinfo =& $blockobj->profile->userinfo;
}

if (empty($bbcode_parser))
{
require_once(DIR . '/includes/class_bbcode.php');
$bbcode_parser =& new vB_BbCodeParser($vbulletin, fetch_tag_list(true));
$bbcode_parser->ces_options = array();
}

$un_parse = explode(' ', $vbulletin->options['ces_parse_fields']);
$un_parse = array_flip($un_parse);
ces_permissions_create($bbcode_parser, 'ces_profile');

foreach ($userinfo AS $key => $value)
{
if (strpos($key, 'field') !== 0)
{
continue;
}

$keynum = str_replace('field', '', $key);

if (empty($keynum) OR $un_parse["$keynum"] === null)
{
continue;
}

$save_tag_list = $bbcode_parser->tag_list;

if (empty($bbcode_parser->ces_options['ces_profile'][$userinfo['userid']]))
{
if ($userperms['ces_parser_permissions'] !== null)
{
$userinfo['permissions'] = $userperms;
}
else
{
$userinfo['permissions'] = cache_permissions($userinfo);
}

$bbcode_parser->ces_options['ces_profile'][$userinfo['userid']] = convert_bits_to_array($userinfo['permissions']['ces_parser_permissions'], $vbulletin->bf_ugp['ces_parser_permissions']);
}

$bbcode_parser->ces_options['current_userid'] = $userinfo['userid'];
$userinfo["$key"] = $bbcode_parser->parse(htmlspecialchars_decode($value), 'ces_profile');

$bbcode_parser->tag_list = $save_tag_list;
}

[nerofix]

Thank you again for your support, so nice of you and works perfect!

[marcossalazar]

Is anyone else getting a DB error when uploading the uploaded vba news fix? It is not working for me and created a DB error when going to the VBA page.

[thincom2000]

Well, what is the DB error?

[eviltechie]

I installed this, and it accomplishes the goal of showing BBCode/HTML, etc in the profile fields. However, I was working on some other things in the admin panel, and saved a usergroup for an unrelated reason...and instead of saving my changes it made a duplicate usergroup with the same name and the changes were saved in that. I worked on this for awhile, even going as far as disabling the product. Nothing worked. I eventually uninstalled it and usergroups started behaving normally again. Saving changes to the group that was being edited, not creating duplicates, etc.

I want to use this, but I can't as long as this bug exists.

I'm on 3.7.3 PL1.

Any ideas?

[thincom2000]

This is not something the mod would do. It only adds bitfields to the admin panel. This would not cause a duplication error. Please check your server logs to see if there were any errors associated with this happening.

[theybannedme]

Is this hack anywhere near having the "extensive vbulletin blog testing" part being added so that blogs will parse bbcode properly? Or am I missing something?

BBcode appears to parse fine for the blog bits in the tab on the memberinfo page, but nothing at all in the actual blog section itself.

This problem still exists... This is a great mod btw :)

[nerofix]

Well, this problem is default by vbulletin. Only the blog entry itselfs parse bbcode when you watch the entry. In every overview or blog preview, bbcode wont get parsed.

[erdiyilmaz]

aLthough i choose admincp usergroup manager admins can use htmL tags in their messages/theats, it doesn't working (v3.7.4)

so i'm going to unistaLL it. thanks.

[marcossalazar]

aLthough i choose admincp usergroup manager admins can use htmL tags in their messages/theats, it doesn't working (v3.7.4)

so i'm going to unistaLL it. thanks.

Is this the only problem? Is the rest of it working okay?

[thincom2000]

You have to have HTML enabled for the particular forum/message type first in vBulletin's own settings. The mod does not attempt to override those settings.

[nerofix]

Hi Thincom,

I got something new for you :)

With 3.8 beta 3, the bb code in social groups threads and in the blog doesnt work anymore.

Deactivating helps, but then in profile fields the bb code wont work anymore and in profiles I get following error:

Warning: Invalid argument supplied for foreach() in [path]/includes/functions.php on line 4074

Hopefully you have some time left to update your mod :)

[thincom2000]

I haven't tested this completely with 3.8 yet. When I do I'll let you know. Also, I cannot fix the blog without access to someone's blog install. It is not worth it for me to purchase the blog to fix a bug in a free addon.

[nerofix]

Like I said, it's not a problem to provide you access to our blog install and 3.8 vb ... I will send you login details in pm later :)

[thincom2000]

I think I solved the issues in social groups threads and picture comment threads in vb 3.8 series. If you ran into any other issues with 3.8, let me know. Otherwise I will be releasing an update shortly.

The blog should still work. Keep in mind that the "blog fix" that is posted here edits the blog product/plugin, so if you performed an update, you need to reapply the fix.

[nerofix]

Hey thincom,

sorry got to work outsite my country at the moment, I'll be back in some weeks I think, then I'll get back to you... I didn't run into other issues.. Only blog bb-code isn't working, like in social group threads. Everywhere else no problems with 3.8.1

[students_forum]

I think I solved the issues in social groups threads and picture comment threads in vb 3.8 series. If you ran into any other issues with 3.8, let me know. Otherwise I will be releasing an update shortly.

The blog should still work. Keep in mind that the "blog fix" that is posted here edits the blog product/plugin, so if you performed an update, you need to reapply the fix.
Hey, I searched through a few posts here but didn't see this question.
The seems to prevent the reputation received on the usercp from parsing :S
could you please help me, thanks :)

[thincom2000]

I was unaware that reputation comments were supposed to even parse in the first place...

[tinycg]

After installing, for some reason I dont see the options in the Vbulletin options, I've attempted to uninstall and reinstall, but that hasnt helped. I do see the options in the usergroup permissions, and the plugins all seem to have installed from doing an audit of the product-xml.

Does anyone have any suggestions?

[imrc]

Same problem here. AdminCP -> vBulletin Options -> CES Profile Fields doesn't exist. Although everything else seems to work fine. This is on 3.8.3.

[thincom2000]

The setting group "CES Profile Fields" has a Display Order of 0. I believe you will only be able to see these settings if debug mode is active, or if you have modified your options to sort another way (e.g. alphabetically).

To get "CES Profile Fields" to appear without doing either, run the following MySQL query:
UPDATE settinggroup
SET displayorder = 1000
WHERE product = 'ces_html_profile'

[ar-K-ic]

I've been hesitant to install this, is this error free now?

[thincom2000]

I'm unaware of any bugs that would prevent you from being able to use this mod. The "CES Profile Fields" setting mentioned above is invisible in the current release, but for most purposes you should be fine with the default values anyway.

[Cerbero1000]

After upgrade from 2.1.1 to 2.1.6 social groups bbcode don'ts works anymore. Same problem for the events forum (not bbcode).
Please help me (3.7.5)

[Warlord]

I disabled this product and now I'm getting this error on member profiles.


Warning: Invalid argument supplied for foreach() in [path]/includes/functions.php on line 4096

Warning: Invalid argument supplied for foreach() in [path]/includes/functions.php on line 4096

Warning: Invalid argument supplied for foreach() in [path]/includes/functions.php on line 4096

Warning: Invalid argument supplied for foreach() in [path]/includes/functions.php on line 4096

Warning: Invalid argument supplied for foreach() in [path]/includes/functions.php on line 4096

Warning: Invalid argument supplied for foreach() in [path]/includes/functions.php on line 4096

Warning: Invalid argument supplied for foreach() in [path]/includes/functions.php on line 4096

Any ideas as to what may be causing this?

I recently upgraded to vBulletin 3.8.4 but I found it odd that I would get the error when trying to remove the hack. When I turn it back on, the errors go away.

[thincom2000]

Did you disable the hack? Or attempt to uninstall it?
Do you have custom plugins that use this mod's permissions - e.g. a custom vBa or profile integration? Since these plugins aren't part of the default product, you need to disable them separately.

You can also try rebuilding the bitfields (visit admincp/index.php?do=buildbitfields)

[Warlord]

Ahhh, that was the ticket. :) Had a seperate plugin called CES Parser Perms: Patch for Raw Userfields.

I was wanting to disable it because for some reason HTML no longer works in posts when it is enabled. I'd still like members to be able to use BBcode in their profiles though.... :(

[BadgerDog]

Do I only need the XML file installed if I'm not using the advanced CES parser?

Thanks .. :)

Regards,
Badger

[thincom2000]

@Warlord, unfortunately I no longer have 3.6 installed (using 3.8), so I can't say what change was made that it no longer parses HTML. Working fine for me on 3.8.4 PL1.

@BadgerDog, install the mod as described in the readme.

[Warlord]

@Warlord, unfortunately I no longer have 3.6 installed (using 3.8), so I can't say what change was made that it no longer parses HTML. Working fine for me on 3.8.4 PL1.

Actually, I'm on vBulletin? Version 3.8.4 now, but I've had that problem since I was on 3.6 and still do. Any ideas?

[thincom2000]

According to this site's records, you haven't updated the mod in quite a while (the current version is 2.1.6 and it says you last downloaded 2.1.2).

I would recommend updating to the newest version of the mod. Then, if you have a small to medium sized forum, you can rebuild the post cache. If you have a medium to large sized forum, just wait for the cache to expire.

[Warlord]

Well that was a pretty novice move. Sorry about that. I updated and it works just fine now. Thanks.

[thincom2000]

Posted the 2.2.2 update. Users who are also running VaultWiki (full (http://www.vaultwiki.org/) or lite (https://vborg.vbsupport.ru/showthread.php?t=239377)) need to update to this version.

[thincom2000]

Posted the 2.2.3 update, which includes fixes for poll options and 'nonforum' messages.

[Tyraunt]

Does this work with 4.0.8?

[thincom2000]

I haven't noticed any issues. vBulletin.org has announced they'll be closing this section of the forums, so you'll probably want to subscribe to the 4.0.x thread for this mod.