Fix for replacement code problem in vB Code

[Steve Machol]

I'm almost embarrassed to call this a 'hack', particularly sincve it's not even mine! :stupid: Actually the code came from FireFly who PM'd me with the answer to this problem I posted on vb.com:

http://www.vbulletin.com/forum/showthread.php?s=&threadid=41430

The problem arises if you try to use replacement variables in vB Code. Beginning with 2.2.3, this no longer works. However the fix (thanks to Chen!) is simple. Just remove or comment out this line from admin/functions.php:

$bbcode=str_replace("{", "{", $bbcode); // stop people posting replacements in their postsOf course remving this line will cause the problem of people using replacement variables in posts. However in my case it's a good trade-off.

[neal]

isn't this corrected in 2.2.3?

[Admin]

No, this is caused by v2.2.3.

[neal]

oh, ok. Thanks then, I'm installing

[Mr. X]

Excellent. The quote looks great now, however Im still confused as to how do do this with PHP and list code.

[Scrub]

I do not understand this!? :confused:

[Steve Machol]

Originally posted by Mr. X
Excellent. The quote looks great now, however Im still confused as to how do do this with PHP and list code. Those are hardcoded into the script and cannot be altered by vB Code. To change them would require further hacking.

[Mr. X]

so it only works on vb.org?

[Wayne Luke]

I think that line of code is part of the cross-site scripting issue that was plugged in 2.2.3. While I don't think it will expose you to the entire problem it does present a weakness.

[TECK]

this is not changed in 223b grrrr...
lol i got it now.. damn i'm slow sometimes.. this line must be removed only if you installed firefly's hack

[Freddie Bingham]

It just stops things like {firstaltcolor} from being converted when you type them into a post.

[Mr. X]

Originally posted by smachol
Those are hardcoded into the script and cannot be altered by vB Code. To change them would require further hacking.

Im still confused here. Is this a hack that ONLY changes the Quote code, or is there something Im missing? Afterall its entitled "New code, PHP and quote boxes!". Im so very tired right now.. :)

[Admin]

You should be able to move the line we told you to delete a bit up, before the parsing of vB codes, and then it'll also solve the problem. I don't have the code in front of me right now though

[Steve Machol]

Please post that when you have a change FireFly.

[Admin]

Nah, if you do this it'll screw PHP code, because every left bracket will be replaced with its HTML entity and the code will be unreadable.

[Mr. X]

Originally posted by FireFly
You should be able to move the line we told you to delete a bit up, before the parsing of vB codes, and then it'll also solve the problem. I don't have the code in front of me right now though

Were you referring to my post or someone elses?

[Radon3k]

Originally posted by smachol
I'm almost embarrassed to call this a 'hack', particularly sincve it's not even mine! :stupid: Actually the code came from FireFly who PM'd me with the answer to this problem I posted on vb.com:

http://www.vbulletin.com/forum/showthread.php?s=&threadid=41430

The problem arises if you try to use replacement variables in vB Code. Beginning with 2.2.3, this no longer works. However the fix (thanks to Chen!) is simple. Just remove or comment out this line from admin/functions.php:

$bbcode=str_replace("{", "{", $bbcode); // stop people posting replacements in their postsOf course remving this line will cause the problem of people using replacement variables in posts. However in my case it's a good trade-off.

What do you mean by "Of course removing this line will cause the problem of people using replacement variables in posts."??

What are replacement variables? Do you need to install this hack, or just comment that line out? I'm a bit confused. Please explain (?)

[Steve Machol]

You cvan find out what replacement variable are by looking at the Replacement sets in your Admin CP. And what I meant was if someone uses a replacement variable in a post (like {firstaltcolor} ) this will automatically translate into the color in question if you remove this line.

I'm not sure if it's fixed here or not. If not, then this will show the hex code: {firstaltcolor}

[Radon3k]

I'm still confused....I'm tryin to understand...My mind is going crazy....

[X-Fan]

Is this fixed in v2.2.4?

[Steve Machol]

No it's not 'fixed'. Read Wayne Luke's response above.

[Mr. X]

Can it be cleared whethor or not this hack can be used for the other codes? Im still confused here. All I get is a great quote effect, but just that, and I would like it for the other codes too.

[Steve Machol]

I'm not sure what you're asking or what your are confused about. All this does is allow people replacement variables to be used in posts. In my case I needed this for the quote box. In fact, that's my only use for it.

[Mr. X]

Ok. The hack is called New code, PHP and quote boxes. Well the only thing that changes is the Quote. I would like the same effect for PHP and other codes.

I had a problem when adding the variables, because the color would not change. This thread fixed it. But Im still wondering how to do the rest of the codes. on Vb.org, php code has the same effect, thats what I want to achieve, to have all codes look like the Quote code.

[Radon3k]

Ok so again, cuz I'm smart like that, you install the original hack by FireFly, then you do the update from this page, correct?

[Admin]

Yes.

[feldon23]

Sorry, but this is not working for me AT ALL.

Just installed 2.2.4, all my Admin templates are factory.

I go into admin/functions.php and comment out (even tried removing) the line:

$bbcode=str_replace <http://www.php.net/str_replace>("{", "{", $bbcode); // stop people posting replacements in their posts

and reupload it.


then I go into Custom vBCodes >Modify and try either of these:

<blockquote><font face="verdana,arial,helvetica" size="1" >quote:</font><hr><br><table cellpadding="4"cellspacing="0" border=1 bordercolor="#0A293E" bgcolor="#0E3652"
width="90%" align="center"><tr><td><font size="2">{param}</font></tr></td></table><br><hr></blockquote>

<blockquote><font face="verdana,arial,helvetica" size="1" >quote:</font><hr><br><table cellpadding="4" cellspacing="0" border=1 bordercolor="#5F9EA0" bgcolor="#1C5780" width="90%" align="center"><tr><td><font size="2">{param}</font></tr></td></table><br><hr></blockquote>

it goes absolutely apes*** with shredded table pieces all over the place.

and if I do:

<table cellpadding="4"cellspacing="0" border=1 bordercolor="#0A293E" bgcolor="#0E3652"
width="90%" align="center"><tr><td><font size="2">{param}</font></tr></td></table>

I get a green box.

The only thing that works is this:
<table cellpadding="4" cellspacing="0" border=1 bordercolor="#5F9EA0" bgcolor="#1C5780" width="90%" align="center"><tr><td><font size="2" color=FFFFFF>{param}</font></tr></td></table>

It's like there's a limit on how much HTML I can put in.

[Steve Machol]

Yes, there's a character limit in the vB Code box.

[feldon23]

Is there an easy way to change max characters?

I looked in admin/bbcode.php but changing the numbers to 60 didn't seem enough of a solution.

[Radon3k]

If I comment out that line, it gives me a parse error on like #1348. have no clue as to why it does, but it seems to work fine if I just do the normal hack.

[Steve Machol]

I have no idea why you'd get a parse error unless to entered something wrong in the file. Commenting this line out worked fine for me.

[Radon3k]

hrmm...Well it works normally without commenting it out...So I guess I can leave it like this?

[Steve Machol]

As I said in my first post you only need to do this if you want to use replacement variables in vB Code. If you don't need that function, then you don't need to bother with this.

[Radon3k]

Ah ok, then I'm straight I guess...Nice, thanks! :)

[Steve Machol]

No probs! :)

[Admin]

Originally posted by feldon23
Is there an easy way to change max characters?

I looked in admin/bbcode.php but changing the numbers to 60 didn't seem enough of a solution.
Yeah you need to run a query tho:
ALTER TABLE bbcode CHANGE bbcodereplacement bbcodereplacement TEXT;

[Jawelin]

I got almost confused when saw in admin/functions.php of VB 2.2.4, within the
function bbcodeparse2() two lines (with some other between) like these:

//$bbcode=str_replace("{", "{", $bbcode);
.
.
.
$bbcode=str_replace("{", "{", $bbcode); // stop people posting replacements in their posts


Questions are:
- Has the problem been solved in 2.2.4 with the above splitting or no ?
- Is cutting out the second line still necessary ?
- How could I generate the problem to see if that bugfix is actually needed by my board ?

Thanks a lot, Steve.

Bye

[Admin]

The line was moved to the end of the function to stop (I think) problems when posting PHP code. But you still need to comment the second line if you want to be able to use replacement variables in your vB Codes.

[Jawelin]

Absolutelly exaustive. Thanks a lot.

[Harvey]

Hi,

this hack has a disadvantage: text attachments are also parsed.

If you have eg. the following description in it (without spaces)

change in template xxx
{ secondaltcolor}FireFly
to
{ secondaltcolor}Chen

it will be shown as:
change in template xxx
#DFDFDFFireFly
to
#DFDFDFChen

[212rikanmofo]

i want to install that quote box hack by firefly, but do i need to run this hack to? im running vb 2.2.5...

[Steve Machol]

Don't rightly know. It depends on whether or not that hack uses vB Code.

[Admin]

Yes you do.

[FleaBag]

Thanks for this, enables me to hack 2.2.5 much more! :D

[FleaBag]

Helped me on 2.2.6, thanks. :)

[Admin]

You everywhere!

[FleaBag]

I'm starting to notice a pattern here...

[Link14716]

*Installs*

Thanks for this. :D

[fonzerelli_79]

dont know why but when i upgraded from 2.20 to 2.26 and reapllied the changes (removed the line, reapplied the hack etc) it doesnt work and i get an error instead

Parse error: parse error in /manutdchat.com/forums/admin/ functions.php on line 2384

(the line above is the last line on the file)

Fatal error: Call to undefined function: vbdate() in manutdchat.com/forums/admin/sessions.php on line 358

;)

[Steve Machol]

A parse error usually indicates a typo or some other error in editing. Start with a fresh functions.php and try applying the hack again.

[Sinecure]

Yeah, i had this problem with 2.2.6, worked well, thanks :)

[cbn]

Hi,

I've been directed to this thread from this thread (http://207.68.162.250/cgi-bin/linkrd?_lang=EN&lah=a546b8f8868906f4ecb2316ea42c8fc1&lat=1026754753&hm___action=http%3a%2f%2fwww%2evbulletin%2eorg%2ff orum%2fshowthread%2ephp%3fthreadid%3d41096%26goto% 3dnewpost)...

however, I'm still confused.

I need to be able to use a [tag] of some sort so that whenever I edit a post, the [tag] code is there instead of the replacement HTML code.

Say I create a replacement:

[dad] => <a href="http://www.commanderbond.net/Categories/9.html">Die Another Day</a>

So, I then post a topic:

Check out the lastest Bond news here at [dad]

Say I want to then edit the post, at the moment, all I get is:

Check out the lastest Bond news here a <a href="http://www.commanderbond.net/Categories/9.html">Die Another Day</a>

How can I get it to display:

Check out the lastest Bond news here at [dad]

...when editing a post...?

[Admin]

You can't, you need to make [dad] a vB Code.

[Xenon]

or he can make small modifications to your /me hack chen ;)

[FleaBag]

Works with 2.2.7. :D

[Chris M]

Gamer:mad: - https://vborg.vbsupport.ru/showthread.php?s=&action=showpost&postid=316171

Satan

[FleaBag]

So you're infuriated about me posting in every hack I have installed - but it'd OK for you to come behind me and post the same message over and over when you don't even have the hacks installed? Hmmm...

Kids...

[FleaBag]

And add to that the fact you've managed to post something as basic as "cool" in practically every hack that has got released.

[Erwin]

Alright, let's take this offline - move to PM if you have to, but don't use this support thread as your private forum to argue with one another (I am referring to both Gamersforum and hellsatan).

As a note: it is okay to post a note saying that the installation has worked in a hack thread - that is fine. The hack author likes to hear feedback about his own hacks. Posting that the hack works for 2.2.8 is in general fine too. I have no real problems with Gamerforum's posts actually (I do keep track of the members here. :) ) In future, if members find something wrong with another member's post, do report the post - a mod will have a look at it.

[DrkFusion]

By doing that you can clearly see that the similar message has been posted like so, and maybe you can see that the hacks that you posted for that, have only 1 - 4 modifications to files, where the coding has not changed from 2.2.1-2.2.8, and in the thread others have implied that it works for 2.2.7, or 2.2.8, as you being a the 'adult' should be know majority of the code for files hasn't been changed since 2.2.1, and somtimes even after 2.0.2, and be able to probably add more to the "Great Works with 2.2.8" phrase. Sure comments are good, but the same thing all the time, seems like a form of spam.

I don't want to start no fight between, me, you, satan, and n9ne, but possibly you may want to save the "Great Works with 2.2.9" posts for problems, and different types of ackknowledgements.

-Arunan

[FleaBag]

Hey all it needed was someone to ask me to stop, and you did. But I think Satan, the queen of spam at vB.org is being slightly hypocritical.

[The_Huntress]

Question: was this fixed in 2.3.0?

[Xenon]

no as it's not really a bug.

it's just a thing some might want it enabled, some disabled