Top 'X' Stats

[firstrebel]

title="<phrase 1="$getstats_thread[titletrimmed]">
Should this be
title="<phrase 1="$getstats_thread[titletrimmed]"
without the (>) at the end. Or include it in the code that needs to be changed. Otherwise you end up with
title="<phrase 1="$getstats_thread[titletrimmed]">>

Bob

[Za4a Tuner]

Should this be without the (>) at the end. Or include it in the code that needs to be changed. Leave it away ;)

@ georgedd
Many thanks for your info ;) ->
i did the changes => and it works :D

[Damien2005]

Hello all,
can anyone help me to get the forumtitle in to the topxstats?

Greetz..

[RDX1]

How do I set it to exclude certian forums?

[Damien2005]

Admincp vBulletin Options >>> Top 'X' Stats by InfiniteWebby >>> Excluded Forums ;)

[Damien2005]

Hello all,
can anyone help me to get the forumtitle in to the topxstats?

Greetz..

No one :surprised:

[cecdah]

Thanks, great hack.

One question; Any possibility of placing this on my right sidebar? :)

[Ruler68jg]

I installed it working perfectly for me, but I just want to know I want to install it on the top I mean right after the main menu. I acutelly want both this and "WHO IS ONLINE" both to gatheron the top right after the main menu.

kind regards

ruler

[plateau]

I installed it working perfectly for me, but I just want to know I want to install it on the top I mean right after the main menu. I acutelly want both this and "WHO IS ONLINE" both to gatheron the top right after the main menu.

kind regards

ruler

try to play with the templates.

[NeutralizeR]

Is it possible to redirect the thread link to the last post instead of the last unread post?

Regards

[crzy]

Hello i dont wanna show admins, s.mods and mods on top poster.. Is there anyway to do this possible..?

Thanks

[Julie]

I installed it working perfectly for me, but I just want to know I want to install it on the top I mean right after the main menu. I acutelly want both this and "WHO IS ONLINE" both to gatheron the top right after the main menu.

kind regards

ruler

In the FORUMHOME template, locate $navbar and add the code below that and add <br> 's as you want/need...

[DrHUS]

how may i can make the topXstats show the Top poster on special forum (just one forum .. like forumID= 10 ..) and the amount of posts the user post on that forum only.. (Or %)

[Lineman28645]

Does this work with vb 3.5.4?

[cuphongle]

Does this work with vb 3.5.4?


yes it does

[cuphongle]

wonder if it can hide from guests?

[kazido]

No one has answered the questions about using this with CMPS. I am using 3.5.4 with CMPS 2.1.0 and cant create a module with topXstats.php. Other modules come up but not that one. The file is in the forum root...

http://www.ozls1.com.au/forum/topXstats.php

...cause it's displayed here.

Im sure some ppl have worked this out, pls help the noob!!! :)
Cheers

[furst]

Is there any way I can get rid of all of the stats and be left with three columns of latest posts from whatever forumids I want?

[q8-star]

I'm having a problem here .

when I move the thread to a new forum ,in the extended page I get a duplicate link for this specific thread .Now I've tried updating lots of counters but that didn't help .

Any suggestion on that ?

[Pathor]

I'm having a problem here .

when I move the thread to a new forum ,in the extended page I get a duplicate link for this specific thread .Now I've tried updating lots of counters but that didn't help .

Any suggestion on that ?

I have the same problems. Any help?

[manutdvn]

How do I make this a little smaller because as of right now its making my forumhome look off centered.

http://img396.imageshack.us/img396/4596/untitled27nd.jpg
I have exactly the same problem. Does anybody know how to fix this?

Thanks.

[manutdvn]

I fixed this. Thanks.

[Datenpapst]

The Statictics shows the title in turkish? Is this normal? I have installed turkish as a language but its not my standard language.

?statistik - En ?ok 5
En ?ok Mesaj Yazanlar En Son ?ye Olanlar En Son Cevaplar

WTF? :(

[DementedMindz]

anyway to group the templates together in admincp?

[Datenpapst]

need help please :(

[Bibi01]

Hello, Thank you very much that functions super, how then I to put the stats over one week for best the posteurs
sorry but my english is not good:confused:
Bibi

[masterross]

can be add top X reputations too?

[Posof]

:confused:


Can someone help me with this...

I want edite the Hack ( topXstats ) but dont now how..
Please see attachment for more info..

You have now 3 colums

Top Posters Newest Members Latest Replies

I want the FIRST colum ( delete ) gone, use 2 colums..

Thanks..

[ChrisBaktis]

Anyway to change this so instead of new posts it will display the top members via a custom profile field?

[Glennskij]

I did what was said in the readme-file, but no "Top stats" appear.
However, nothing appears on the frontpage!
The php-file is working fine, but i have to enter it manually.

I did this:
3) In your FORUMHOME template find:

<!-- end what's going on box -->

And after it add:

<if condition="$show['topXstats']">
$topXstats
</if>


so that my FORUMHOME is like this:


<!-- what's going on box -->
<if condition="$show['topXstats']">
$topXstats
</if>
<table class="tborder" cellpadding="$stylevar[cellpadding]" cellspacing="$stylevar[cellspacing]" border="0" width="100%" align="center">
<thead>
<tr>
<td class="tcat" colspan="2">$vbphrase[whats_going_on]</td>
</tr>
</thead>


Please help! Thanks!

[fanhost.com]

anyone else having issues with this killing their server?

[DementedMindz]

anyone else having issues with this killing their server?
nope not at all..

[SCORPION1]

whooooooo i have been looking for this hack nice one m8 went in like a dream:banana:

[vBB-vietnam]

I don't want forums isn't active appear the latest replies column. How to ?

Forum isn't Active mean: Will not appear but remains accessible if the forum's URL is known
(Edit in ACP -> Forum Manager -> Chose Forum, see blow:
Forum is Active (Will not appear if set to no, but remains accessible if the forum's URL is known)
)

[vBB-vietnam]

Help me, Please
Thank !

[plateau]

I don't want forums isn't active appear the latest replies column. How to ?

Forum isn't Active mean: Will not appear but remains accessible if the forum's URL is known
(Edit in ACP -> Forum Manager -> Chose Forum, see blow:
Forum is Active (Will not appear if set to no, but remains accessible if the forum's URL is known)
)

i guess what u want is to exclude some forums from being calculated, and the current hack does not support this requirement.

what u need to do is to find out that part of code in php, and in the SQL try to exclude the those forums that u dont wanna be included in the statistic.

e.g.

search ......... where forumid != 1..............

hope the concept helps.

[obmob]

Hey, great mod, thanks... i was looking to translate it to spanish, but somehow i can't find the "Statistics - Top X" phrase :(

[vBB-vietnam]

i guess what u want is to exclude some forums from being calculated, and the current hack does not support this requirement.

what u need to do is to find out that part of code in php, and in the SQL try to exclude the those forums that u dont wanna be included in the statistic.

e.g.

search ......... where forumid != 1..............

hope the concept helps.
I write small code:


//List all forum isn't active & child
$childlist = $db->query_first("SELECT childlist FROM " . TABLE_PREFIX . " forum WHERE displayorder='0' ");
if($childlist['childlist'])
{
$excludedforums = $excludedforums . ',' . $childlist['childlist'];
}

but query_first "Executes a data-reading SQL query, then returns an array of the data from the first row from the result set". Now I want returns an array of the data from the all row from the result set. How to ? I don't know about mysql & vBulletin.
THank !

[e DoGG 4 sHo]

Hi guys I have installed this Top 'X' Stats by InfiniteWebby hack on my board, and it works great on the default skin, but when I went to purchase a new skin for my site the hack does not appear on the forums at all. 1.2.1 is the version that I currently have on my site and I was told by another fellow vbulletin member that the hack should have automatically installed itself on to the new skin like the hide hack did. Is the hack just incompatible with the top x stat hack or am I doing something wrong.

Thanks for the help, I will really appreciate it.

[Puntal]

I have just installed this also,but how do i show it at the top?It's Showing at the bottom of the page...

Cumps
Puntal

[dilbert]

* dilbert installs :)
This is terrific, thank you!

[FreshFroot]

Just had a question, anyway you could fix it, so it works with vbSEO? The members and top posters works fine. When it comes to the threads it doesn't take you to the last post, i'm guessing vbSEO interfere's with it......

[tormodg]

It works fine here, with vBSEO. It doesn't take you to the last post but first unread post.

[lasto]

works fine on vb3.5.4
installed flawlessy

/me clicks install

[Zidane007nl]

Installed it on my forums and it works sweet! Thanks.

[B?-Y?u]

I like it. Click Install :)

I don't want forums isn't active appear the latest replies column. How to ?

Forum isn't Active mean: Will not appear but remains accessible if the forum's URL is known
(Edit in ACP -> Forum Manager -> Chose Forum, see blow:
Forum is Active (Will not appear if set to no, but remains accessible if the forum's URL is known)
)
Hi vbb-vietnam. I understand and I think I can help you :)

Open topXstats.php and plugin Top 'X' Stats by InfiniteWebby (Hook Location : forumhome_complete)
Find:

// ## HIDE FORUMS WITHOUT THE CANVIEW, CANVIEWOTHERS OR CANSEEDELNOTICE PERMISSION ##
if (!($forumpermissions[$forum["forumid"]] & $vbulletin->bf_ugp_forumpermissions['canview']) AND !$vbulletin->options['showprivateforums']) {
$excludedforums = $excludedforums . ',' . $forum['forumid'];
}

Add Below

// ## HIDE FORUMS WITHOUT THE Not ACTIVE, DISPLAYORDER=0 ##
if (!$forum['displayorder'] OR !($forum['options'] & $vbulletin->bf_misc_forumoptions['active']) AND !$getinvisibles)
{
$excludedforums = $excludedforums . ',' . $forum['forumid'];
}


If i have time, I will write it as a option in ACP for U.
Enjoy it, compatriot :)

[vBB-vietnam]

Thank was support :banana:

[Zain Jaffer]

Anyone heard from Jonnie? (infinitewebbie).

He doesn't seem to have been active since 8th May?

[redlabour]

Hi,

i use this Hack now for Months. There was never a Problem. But now for 2 Days the latest Threads are allways shown as "New" even if i read them and the do not go to "Old"..

Anyone else with this Problem ???

Crazy - i log out to be a Guest. All changes to "old" now. I log in write a Posting and then this (my own) Posting is "New" marked. Help !!! :(

[redlabour]

Now i tested it again after mark all Forums as "read".

Answerd in another Thread then and the Thread is marked as "New" after reading. :confused:

In the Forum it is marked as "read". What the Hell ? :surprised:

[redlabour]

And will it work in the Future with vBulletin 3.6 (http://www.vbulletin.com/forum/showthread.php?t=187654) ?

[RFViet]

My forum has adult section, I'd like to display forum name too, how do i do that ???

[peterska2]

works on 3.6 but requires one additional phrase

Phrasetype: GLOBAL
Product: TopXStats
varname: member
Text: Member

[shoupz]

just installed it, loving it!

[murph5]

Loving this, but just one problem i have noticed... if a forum is set to moderate threads before allowing them to go live, these pre-moderated threads still show up in the list to guests/members etc. When they click on the link they get "invalid thread". Is there a way to restrict pre-moderated threads from shoing in the list?

[DementedMindz]

what i think is funny is georgedd posted a fix for this so you cant execute arbitrary JavaScript code and the staff never shut this down cause of the exploit or even fixed it... for new users using this i would do these changes or you run the some serious risks

https://vborg.vbsupport.ru/showpost.php?p=909560&postcount=250

[Paul M]

what i think is funny is georgedd posted a fix for this so you cant execute arbitrary JavaScript code and the staff never shut this down cause of the exploit or even fixed it... for new users using this i would do these changes or you run the some serious risks

https://vborg.vbsupport.ru/showpost.php?p=909560&postcount=250
What I find funny is that people think we could possibly be aware of every single post, in every single hack. ;)

If no one reports a problem then the chances are we will never know about it.

I will take a look at the posted fix and see if I can add it to the zip. :)

[Draygonia]

Paul M! Why did you remove it! I was just about to install :(

Exploit was found, I fixed mine, you all better do what demented says or reinstall the mod when the fix comes.

[Paul M]

Because I was applying the fix :) You can d/l it now.

[popowich]

A special e-mail should have gone out for this issue a long time ago!

Is there a similar feature that is more regularly maintained?

Are there any other known issues besides this post?

-Raymond


BTW, I've gone ahead and fixed the "non entity" bug I reported above. For those interested, inside topxstats.php (or edit directly in vbulletin control panel), find the lines:

else
{
$getstats_thread[titletrimmed] = $getstats_thread[title];
}
}


and add beneath it one extra line:

else
{
$getstats_thread[titletrimmed] = $getstats_thread[title];
}
}
$getstats_thread[titletrimmed]=htmlspecialchars($getstats_thread[titletrimmed]);


Also, inside the template "topXstats_thread_bit", find:

title="<phrase 1="$getstats_thread[title]"

and change that to:

title="<phrase 1="$getstats_thread[titletrimmed]">

I highly recommend you implement the above changes or changes of your own. Otherwise, someone can execute arbitrary JavaScript code on your site just by entering as the title of a thread the script, such as:

<script>alert("hi")</script>

[DrHUS]

is there some Add-on that show me the status ( Top X stats ) for each forum (one-by-one) ??

[C_P]

Installed 1.2.1a zip upgrade no issue so far. Thank you all involved for security notice and fix.

[KoC]

Great Hack

[Neo_Angelo]

i upgraded to 3.6.0RC1 and it still works fine but it seems where it should say:

Newest members:

Member: Post:

and

Top posters:

Member: Post

mine now says

Newest member:

: post:

any idea's why this is?

[Shazz]

Its better?
________
ultimate fighters (http://ultimatefighters.org/)

[peterska2]

That just fixes a few missing phrases and the like when using this on 3.6.0 The actual code is exactly the same as the 3.5.4 version

[Davidov06]

Instead of actually adding the box to the bottom of my template, I've actually just added a hyperlink to /topXstats.php right next to the What's Going On? section. It looks a lot nicer.

[o0Hubba0o]

You have some missing phrases. Let me see if I set my phrases correctly. If I did I'll export it for you.

Yes I did, import this version over writing your existing one.

Note: This version will NOT work in 3.5.4, it is for 3.6.0 beta 1 upwards only.
Thanks alot for that fix, much appreciated. ;)

[Neo_Angelo]

ah thanks for the update i needed that fix, it was damn annoying not seeing Members: lol great job ^_^

[redlabour]

Where is the Version for 3.6 ?

[redlabour]

Sure - but where is the release Thread so i can add it to "My installed Hacks" ?

[peterska2]

The thread you are refering to is this one.

Most modifications for 3.5.x will work on 3.6.x

[flapjack]

Thanks for the update to 3.6! Works like a charm. :)

[burntire]

Working good on my 3.6.0.

[chimaira]

Would like to intergrae this somehow in my sidebar.. Not sure how id go about it mind.

[obmob]

Would like to intergrae this somehow in my sidebar.. Not sure how id go about it mind.oh, i tried to do that... never worked :hurt:

[redlabour]

You have some missing phrases. Let me see if I set my phrases correctly. If I did I'll export it for you.

Yes I did, import this version over writing your existing one.

Note: This version will NOT work in 3.5.4, it is for 3.6.0 beta 1 upwards only.

Why not opened a new Thread at 3.6 Section ?

[peterska2]

Because this is not my modification, and apart from a couple of additional phrases, it is just the original one. To release requires permission from the original author, and also then requires support, which I just don't have enough hours in the day to provide for something identical to the original apart from those phrases.

[5IVEO]

Is it possible to make this work at the bottom of vbadvanced cpms?

[Jasmin]

You have some missing phrases. Let me see if I set my phrases correctly. If I did I'll export it for you.

Yes I did, import this version over writing your existing one.

Note: This version will NOT work in 3.5.4, it is for 3.6.0 beta 1 upwards only.

Thank you thank you thank you for the 3.60 version! *phew*

[q8-star]

You have some missing phrases. Let me see if I set my phrases correctly. If I did I'll export it for you.

Yes I did, import this version over writing your existing one.

Note: This version will NOT work in 3.5.4, it is for 3.6.0 beta 1 upwards only.

Nice work ...Installing now ..

[redlabour]

The 3.6 Fix causes a Error. If a Thread has moved it is displayed twice but only the Link to the real Thread works.

[Shazz]

The 3.6 Fix causes a Error. If a Thread has moved it is displayed twice but only the Link to the real Thread works.
Interesting i just did that and i don't see anything.
________
600 (http://www.mercedes-wiki.com/wiki/Mercedes-Benz_600)

[Valter]

You may wish to try Advanced Forumhome Statistics:
https://vborg.vbsupport.ru/showthread.php?t=122986

Works with vBulletin 3.5.x/3.6.x.

[MissKalunji]

working perfectly on 3.6!

[nishv]

It does work with 3.6.0 with a minor issue...

The "Member" Title is missing for some reason... Any Idea how I can rectify this issue?

Please see the Attachment for more info.

[peterska2]

It does work with 3.6.0 with a minor issue...

The "Member" Title is missing for some reason... Any Idea how I can rectify this issue?

Please see the Attachment for more info.

See this post (https://vborg.vbsupport.ru/showpost.php?p=1031123&postcount=316) for the solution.

[nishv]

Excellent, Works! thankyou!

[SONOFSAM]

Might be a security problem with people putting in meta tags using possible flaw in this on 3.6.0.

Might want to disable for now until a fix is made, or you leave yourself open to so called "hackers"...or better yet...lamers.

[puertoblack2003]

Might be a security problem with people putting in meta tags using possible flaw in this on 3.6.0.

Might want to disable for now until a fix is made, or you leave yourself open to so called "hackers"...or better yet...lamers.

yep you right i was hacked and was able to fix it in time and later was told that this hack has a opening so i unistalled it completely

[puertoblack2003]

yep you right i was hacked and was able to fix it in time and later was told that this hack has a opening so i unistalled it completely

apparently there's a fix for that opening that hackers can get into didn't see this till now

https://vborg.vbsupport.ru/showpost.php?p=909560&postcount=250

[BoYagoob]

Is that announcement about your hack?! or other hack?!

http://www.vbulletin.com/forum/showthread.php?t=198902

[Shazz]

yep you right i was hacked and was able to fix it in time and later was told that this hack has a opening so i unistalled it completely
Hackers?
Because of this module..

[Lapsetur]

Well we need a update for 3.6.0 until then I will not use it because yesterday I had enough attacking from the lamers

[DementedMindz]

ill report the mod this way admins can take a look and if there is a exploit they will usually patch it.

[DementedMindz]

Well we need a update for 3.6.0 until then I will not use it because yesterday I had enough attacking from the lamers


did you apply the patched version? that the staff fixed? and if so were still hacked or what happen?

[Paul M]

Unfortunately, it seems that a 3.6 product version posted in this thread (in July) was based on version 1.2.1 (i.e. not 1.2.1a) so did not have the security fix built in to it. That version has now been removed and a fixed version product (1.2.1c) for vb 3.6 is attached to this post. Anyone who installed the previous 3.6 product should upgrade to this version.

[DementedMindz]

thanks paul

[nishv]

Unfortunately, it seems that a 3.6 product version posted in this thread (in July) was based on version 1.2.1 (i.e. not 1.2.1a) so did not have the security fix built in to it. That version has now been removed and a fixed version product (1.2.1c) for vb 3.6 is attached to this post. Anyone who installed the previous 3.6 product should upgrade to this version.

Have you managed to get rid of the meta refresh bug on script?

http://www.vbulletin.com/forum/showthread.php?t=198968

for more info...

[DementedMindz]

Have you managed to get rid of the meta refresh bug on script?

http://www.vbulletin.com/forum/showthread.php?t=198968

for more info...

i trust pauls post as he has fixed alot of scripts and i know he was the one who posted the last fix so im sure its all fixed now.

[Paul M]

Have you managed to get rid of the meta refresh bug on script?
I have applied the fix posted here ;

https://vborg.vbsupport.ru/showpost.php?p=909560&postcount=250

To both versions (3.5 was done in July, the unofficial 3.6 version today).

AFAIK, this fixes the problem you are referring to.

[q8-star]

thank you Paul ..

One more thing I hope if you replace the first post attached .zip file with your patched one .

[Paul M]

The main zip (for 3.5) was patched in July.

[Nuguru]

Hello Everyone,

I understand there is a security vulnerability - http://www.vbulletin.com/forum/showthread.php?t=198902, were we are being told to uninstall Top X Stats.

I would rather keep this mod so I am wondering if this issue has been addressed. I see from previous posts that there has been some security issues addressed but no sure if it is this one.

I am running vb 3.5.4 and Top X Stats 1.2.1a

Is there something I need to do here to get the most secure version for vb 3.5.4.?


Thank You,


Nuguru :)

[Monica05]

I was in the process of disabling this since I followed your link about security and I got a new user on my forum named ANTHRAX.

Then the user posted "hacked by ANTHRAX" for their one and only post.

[Shazz]

thanx paul!

[49er]

Does that code work for 3.5.2 and 3.5.4 boards ? as my 3.5.2 one got hacked but i have added a new code in newthread.php taken from vb forum after i got my site back.

[Wild-Wing]

hmm teepeg would that be what i posted?

[Nuguru]

Hello,

It's a shame to hear that we are incountering a security problem with Top X Stats and I am in the process of finding the solution to ensure that 1.6.1a is secure for my vb 3.5.4. Any help would be appreciated.

In addition, I was wondering if there has been any recent security issues with VBStatExtended since it seems to be a very similar mod to Top X Stats?


Thanks in Advance,

Nuguru :)

[Wild-Wing]

<a href="https://vborg.vbsupport.ru/showpost.php?p=1066969&postcount=6" target="_blank">https://vborg.vbsupport.ru/showp...69&postcount=6</a> read that man

[Nuguru]

https://vborg.vbsupport.ru/showpost.php?p=1066969&postcount=6 read that man

Thanks everyone for helping out.

Nuguru :)

[InfiniteWebby]

I'm sorry for not fixing the problem sooner but when I got an email saying that there was a problem I patched my own code. Apparently when the vB.org admins patched this version though, they only patched one instance. Anyway I've uploaded the version CURRENTLY running on my site (of which a "hacker" tried to attack but was unsuccesful and got laughed away), my version also shows the full security friendly version of the title when you mouseover the truncated version in the latest threads and also adds the missing phrases to vB3.6 versions.

[DementedMindz]

InfiniteWebby nice to see you come back and fix the problem. Not to many would come back and do that.

[Shazz]

Thanx for the update-

[DementedMindz]

OH BOY The zip was there now its gone did something happen? ahh I see n/m

[Nuguru]

I'm sorry for not fixing the problem sooner but when I got an email saying that there was a problem I patched my own code. Apparently when the vB.org admins patched this version though, they only patched one instance. Anyway I've uploaded the version CURRENTLY running on my site (of which a "hacker" tried to attack but was unsuccesful and got laughed away), my version also shows the full security friendly version of the title when you mouseover the truncated version in the latest threads and also adds the missing phrases to vB3.6 versions.

Hello,

I have made the changes suggested earlier in this thread:

heres a fix for it
find in newthread.php:
if ($_POST['do'] == 'postthread')

then find:
'subject' => TYPE_STR,
change the TYPE_STR to TYPE_NOHTML

so I am wondering if I need to go ahead and do the overwrite with this new updated version?

I am using 3.5.4. with Top Stats 1.6.1a


Thank You for the Effort!

Nuguru :)

[DementedMindz]

Persoanly I would remove it and reinstall it to be sure. I mean the hack takes 2 mins to setup. And I dont think I would keep the other code installed.

[teedizz]

Database error in vBulletin 3.5.2:

Invalid SQL:

### INSERT QUERY GENERATED BY fetch_query_sql() ###
INSERT INTO plugin
(`active`, `executionorder`, `title`, `hookname`, `phpcode`, `product`)
VALUES
('1', '5', 'Top \'X\' Stats by InfiniteWebby', 'cache_templates', 'if (THIS_SCRIPT == \"index\" OR THIS_SCRIPT == \"topXstats\") {\r\n\r\n global $globaltemplates;\r\n\r\n $globaltemplates = array_merge($globaltemplates, array(\'topXstats_stats_bit\', \'topXstats_member_bit\', \'topXstats_poster_bit\', \'topXstats_thread_bit\'));\r\n\r\n}', 'topXstats');

MySQL Error : Unknown column 'executionorder' in 'field list'
Error Number : 1054



i get this error now, anyone know why?

[socalsoccer]

When trying to import product. Trying to overwrite.

3.5.2

Database error in vBulletin 3.5.2:

Invalid SQL:

### INSERT QUERY GENERATED BY fetch_query_sql() ###
INSERT INTO plugin
(`active`, `executionorder`, `title`, `hookname`, `phpcode`, `product`)
VALUES
('1', '5', 'Top \'X\' Stats by InfiniteWebby', 'cache_templates', 'if (THIS_SCRIPT == \"index\" OR THIS_SCRIPT == \"topXstats\") {\r\n\r\n global $globaltemplates;\r\n\r\n $globaltemplates = array_merge($globaltemplates, array(\'topXstats_stats_bit\', \'topXstats_member_bit\', \'topXstats_poster_bit\', \'topXstats_thread_bit\'));\r\n\r\n}', 'topXstats');

MySQL Error : Unknown column 'executionorder' in 'field list'
Error Number : 1054

[peterska2]

I've uploaded a 3.5.x version of the fixed modification. If you are using 3.5.x please make sure that you download and use the 3.5.x zip file.

[Figurehead]

Thank you very much for the fix :)

One last question (a stupid one I admit...does not regard the vulnerability fix)

Take a look at the screenshot:

http://www.beyondfear.de/da.jpg

The previous TopXStat version I had installed was German (I don?t remember where I got that one), but the one I downloaded here is English, so now I want to change back the descriptions into German (Top Posters, Newest Members and so on). Which file/template do I have to look into? I have absolutely no idea, couldn?t find it yet :( Please help!

Thanks!

Edit: Fixed version works fine :) They registered again and tried to do their little trick (:D) but it didn?t work this time :)

[TCHQ-0wn4g3]

Thank you for fixing this plugin. It's a great plugin I might add, the perfect addition to any VB install. Also being updated by email each time the plugin is updated is also a live saver :)

[Mark.B]

I'm sorry for not fixing the problem sooner but when I got an email saying that there was a problem I patched my own code. Apparently when the vB.org admins patched this version though, they only patched one instance. Anyway I've uploaded the version CURRENTLY running on my site (of which a "hacker" tried to attack but was unsuccesful and got laughed away), my version also shows the full security friendly version of the title when you mouseover the truncated version in the latest threads and also adds the missing phrases to vB3.6 versions.
Personally I don't use this, but only because I already have a customised latest threads hack running.

However I know it's a popular hack, and I just wanted to say you are to be applauded for coming back and adding all the required fixes, security issues can happen with any code, what is important is that it is fixed.

[Delphiprogrammi]

your templates are not grouped ....
product Top'X'Stats
hook location "template_groups"

php code


$only['top']='topXstats';


plugin active yes

all done

[DementedMindz]

your templates are not grouped ....
product Top'X'Stats
hook location "template_groups"

php code


$only['top']='topXstats';


plugin active yes

all done


where are you adding that too?

[redlabour]

topXstats 1.2.2 (vulnerabilities fixed).zip

topXstats 1.2.2 (vulnerabilities fixed) 3.5.x.zip

Sorry Guys, but we are at 3.6 ! Where is the update for 3.6 Users ?

Update :

Oh this version also works with all current version of vB 3.6. So feel free to use it on that version.

- InfiniteWebby

And why did nobody move this to 3.6 Section ?

[DementedMindz]

its right there 1.2.2

[Delphiprogrammi]

where are you adding that too?

add a new plugin to the product at hook location "template_groups" then the templates the system uses will be grouped together

[DementedMindz]

Yeah I forgot to post that I had got it. But thanks for replying. This way maybe it helps others.

[peterska2]

The 3.6.x update was the one with no suffix. I've added a suffix to it so that it is clearer which zip is for which version.

[WhyDoesItMatter]

I like this hack.. But, I seem to be getting a lot of people signing up on my website to try and use the exploit, I had to close down my registration hoping they'd go away, but nope.. I checked out my sites search ref's, and sure enough topxstats.php is there... Is there anyway to make it viewable to users only?, I had to uninstall this hack even though it's been patched =/

thanks

[TeaTree]

Hi,

Yes even though the plugin has been updated with the aparent fix, users are still
managing to re-direct the forum via it-Any idea why?

Thanks

[RFViet]

the fix does'nt work with other characters likes: french, chinese ....

[DementedMindz]

lol what are they redirecting it with french, chinese and so on now?

[tommyxv]

How about censoring < and > I'm sure they are the same in any language. :)

[popowich]

To completely remove this product do I need to do anything besides uninstall the product via the admincp, and delete the .php file?

-Raymond

[RFViet]

lol what are they redirecting it with french, chinese and so on now?

it's showing weird characters like 7&###&98

[steven99]

Could someone please give an example of the other language exploit mentioned above? I'd like to test it on my forum to see what happens.

[DementedMindz]

personally i dont think thats a good idea to post it here on the site i dont think the staff would either. i know the new version is patched and working

[steven99]

personally i dont think thats a good idea to post it here on the site i dont think the staff would either. i know the new version is patched and workingSorry, I meant via PM.

[cbr929rrerion]

I did the patch too and it still got hacked again using this..

I like the feature but I am un installing it !!!!!!!!!!!!!!!

[steven99]

I did the patch too and it still got hacked again using this..

I like the feature but I am un installing it !!!!!!!!!!!!!!!Were you using 1.2.2? If so, could you PM me the title they used? So far I haven't gotten reports of this happening on my forums with 1.2.2 but I'm really thinking of uninstalling this just to stop the attempts.

[Datenpapst]

How about a version for the vbb 3.6 gold?

[DementedMindz]

one for 3.6 is right at the top.

[georgedd]

I did the patch too and it still got hacked again using this..

I like the feature but I am un installing it !!!!!!!!!!!!!!!

Please PM me the title they used to bypass the fix as well. I'd like to take a look and see if there's anything more that can be done to the fix to improve it.

[DementedMindz]

hmm its strange all these new people want a link so they can bypass it. I dont think they had the newerst version installed.

[Shazz]

I don't see any bugs in the new one... looks clean

[Dead End Society]

I ran just the upgrade yesterday, but someone still got through today. I uninstalled the hack then reinstalled it to see if that helps.

[georgedd]

That's strange indeed. The fix I implemented on my own (https://vborg.vbsupport.ru/showpost.php?p=909560&postcount=250) has not failed me yet, with the most recent attack attempt today. I've not examined the official patch yet, but from the discussions here it seems to basically be based on what I posted, so if there is still a problem with the fix, I'd certainly like to know about it.

[zeroality]

Yeah, looks like the security fix hasn't fixed this at all. :\

Just got attacked with it.

[Delphiprogrammi]

hi people,

I've changed this modification a bit and performed two tests on my own board.I tryed an XSS attack (failed) and i tryed a meta redirect(failed) looks like clean to me now

[georgedd]

Well Delphiprogrammi, the original fix would have stopped the two attacked in your screenshots already. What I'm curious is the reports that people are still getting hacked after applying the fix, yet no one has provided (via pm) an example of what the hacker used. Are the reports due to they not applying the fix correctly (not overwriting the buggy version somehow), or is there really still a hole?

[Delphiprogrammi]

Well Delphiprogrammi, the original fix would have stopped the two attacked in your screenshots already. What I'm curious is the reports that people are still getting hacked after applying the fix, yet no one has provided (via pm) an example of what the hacker used. Are the reports due to they not applying the fix correctly (not overwriting the buggy version somehow), or is there really still a hole?

yeah that's what i like to know to besides the XSS and the meta refresh exploits no hole is known is this but still people complain about being hacked hmmmz

[chadlyou812]

How do you limit what columns show up on topXstats.php? I just want Latest Replies to show.

Thanks

[chadlyou812]

Does this hack open up holes in a site? Is it secure?

[SuperFly]

It is now.

[chadlyou812]

Thanks for letting me know the hack is secure.

One more thing...

How do you limit what columns show up on topXstats.php? I just want Latest Replies to show.

Thanks

[Shazz]

Thanks for letting me know the hack is secure.

One more thing...

How do you limit what columns show up on topXstats.php? I just want Latest Replies to show.

Thanks
There is already a module for "Latest Replies"

[Mr. Blur]

i try to import the product, both allow overright and not allowing it, and get this every time:

XML Error: not well-formed (invalid token) at Line 1

yes i have the right version

[geniuz14]

if i wanted the top x stats table to appear under my shoutbox....instead of under the "whats going on box" how would i do so???plz reply :)

[DementedMindz]

i try to import the product, both allow overright and not allowing it, and get this every time:

XML Error: not well-formed (invalid token) at Line 1

yes i have the right version


so erase the old one and install the new one

[chadlyou812]

There is already a module for "Latest Replies"

I know but, I just want the Latest Replies to appear and not Top Posters and Newest Members. Basically, how do I edit what columns appear?

Thanks!

[Karabaja]

Hello everyone.

Any idea on how to add forum names next to latest thread?

I tried searching this thread but didn't find anything, sorry if I missed something.

It would be very useful to me, most of the times thread title doesn't clearly indicate in which section thread was posted so people check threads which they are actually not interested in.

I've seen it done on one board so I guess it must be possible.

[Delphiprogrammi]

I know but, I just want the Latest Replies to appear and not Top Posters and Newest Members. Basically, how do I edit what columns appear?

Thanks!

you cannot do that without "heavy" editing the source code

[geniuz14]

could anyone plz tell me how to move the whole box to be just under my shout box? anyone???

[DementedMindz]

move the could that you put in your forum template.

[Karabaja]

could anyone plz tell me how to move the whole box to be just under my shout box? anyone???


You just move

<if condition="$show['topXstats']">
$topXstats
</if>

anywhere you want it displayed in your forumhome template.

[geniuz14]

thats just it though..im useless with templates...could u possibly direct me to where exactly i should post it?

[Karabaja]

Well I don't have shoutbox installed so I am not sure whats the code for in forumhome template but you'll spot it easily it will mention shoutbox. Just go to style manager open forumhome tepmplates then a template called forumhome. Find that code for topxstats I wrote earlier and move it to the top of the template. You'll see on top something like:

$header
$navbar

somewhere under it should be a shoutbox code, and you can add topxstats under that shoutbox code if that's where you want to display it.

[roe]

I know but, I just want the Latest Replies to appear and not Top Posters and Newest Members. Basically, how do I edit what columns appear?

Thanks!

i edited the xml file. i deleted the tables for the top posters and newest members and it seems to work just fine.

http://forum.realmofexcursion.com

[Lance Carbuncle]

My site has been hacked. I was runnng Top X, amongst other hacks. I have uninstalled it, but am not sure if this was how the site was hacked, or what to do to get it back. The index pages for my forum, and photopost, and photopost classifieds all show the hackers page, Unfortunately, I am not well versed at this stuff and could really use some help getting my site back... Could someone PM me or reply please? At least let me know if the hack on my site was from running Top X, or I have another problem....

If the site is visited from anywhere but the index page, everything works fine

http://www.forums.repashy.com/cmps_index.php

my site: http://www.forums.repashy.com/



Sincerely, Lance

UPDATE.... I re uploaded my index pages and everything SEEMS normal... Is this all I needed to do? .... Sorry I am such a moron, but I could use the piece of mind from someone to let me know if that's all I need to do.......

UPDATE 2 .... I have figured out that the index page of every subdomain has been hacked. these are outside vbulletin's folder.... might be unrelated to this hack vulnerability and just a coincedence.... anyone?

UPDATE 3... Well, after hours on my site I figured out it was unrelated to this hack and actuall a critical vulnerability in flashchat..... if you are running that script, make sure you check it out. No message was sent out by the author, even though it is a paid script and the support forum on the site is flooded with info on it.....

Lance

[whitesoxzone]

hi guys, my mod. seems to work fine. I did both step 1 and 3. but i didn't do step 2: 2) Upload topXstats.php to your forums directory. Is that okay? will it work fine without doing that. also, if I really have to do that, what exactly do I do? Thanks guys.

[SuperFly]

using ftp or uploading program, upload it to your main forum directory, with index.php in it. You need to for it to work.

[RFViet]

it's showing weird characters like 7&###&98

Here is the problem with language
Anyone knows how to fix ???

[Shazz]

English PleasE?

[RFViet]

English PleasE?
Did I write in other language ??

[ngocha85]

this hack is very bad with Unicode!

[Apfelfrucht]

Hello,

I've installed this hack successfully and i'd like ask 2 questions :
1. How to not display the "Administrators and Moderators" nicknames on "Top Posters" ?

2. Is it possible to have some "Top Posters only from the Week Beginning", i mean to display only the Top Poster Person who makes some messages from "Sunday to Monday" and not displaying the entire messages from the Registration of that Top Poster Person. Is it possible and how ?

Thanks in advance.

[desiforums]

can you tell me how can i put this on the top instead of bottom...
When i installed it, the state is at the bottom of the forum can you tell me how can i put it on the top of the forum. thanks...

[bigmonay2k]

this work with 3.6.1??

[desiforums]

ya worked for me

[desiforums]

but i want to know how can put it on the top of the forum its at the bottom anyone knows????

[Shazz]

but i want to know how can put it on the top of the forum its at the bottom anyone knows????
In your "navbar" template
Add to the very bottom
<if condition="$show['topXstats']">
$topXstats
</if>

-Hope it works :)

[cbr929rrerion]

this is STILL a security risk..

Forum was redirected again today...

Yes I have the newest version and it still is insecure..

[DementedMindz]

this is STILL a security risk..

Forum was redirected again today...

Yes I have the newest version and it still is insecure..


report it and have the admins look at it.

[murrtex]

this is STILL a security risk..

Forum was redirected again today...

Yes I have the newest version and it still is insecure..


delete and forget this hack..

and try this
https://vborg.vbsupport.ru/showthread.php?t=122986

be sure you will be glad ;)

[Shazz]

I can't figure out how the crap people redirect This?!!
Im removing it :(

[Paul M]

report it and have the admins look at it.I had a look at this tonight.

If this is installed from scratch then it cannot be exploited.

However, because of the the way the fix has been implemented - it is possible that it may still be exploitable if someone updated their older version to the new code, and they had customised the templates, but did not revert or re-edit those templates.

This is because the older versions used $getstats_thread[title], the fix uses $getstats_thread[titletrimmed] - but the old variable is still available, and if displayed by an old template, will still cause a redirect.

The best workaround to this is to make sure you revert any old topXstats templates. The author should fix this properly by making sure that the old variable $getstats_thread[title] is either removed, or also made 'harmless' by using htmlspecialchars().

[DementedMindz]

yeah I havent had a problem Paul since the fix but others are claiming they are so I told them to report it if so.

[apdcanari]

Hello,

Thread preview, it is possible (lasts threads) ?

Tks,

C?dric ;)

[ngocha85]

<u>vb Option: Top 'X' Stats by InfiniteWebby</u>
Latest Replies Thread Title Displayed Characters: < 70

can fix redirect error!

[cbr929rrerion]

I added some of the words they use to the censored list and it stopped it, they try and do it but it dont work because the words are replaced with ****

So that does stop it..

[cuphongle]

this is STILL a security risk..

Forum was redirected again today...

Yes I have the newest version and it still is insecure..

nah bro, just censor the word {meta}
they were using a meta code to redirect your site

[cuphongle]

is it possible to not let guests see the top x?

[meissenation]

PLEASE do the community a favor and send out a security bulletin about this security risk. I had this happen to my site and it took me a little while to fix it. Had I known about this before hand, it would've never happened.

[The-Ensemble]

can this be used inside a forum? or in multiple forums to list posts, threads active members etc. inside that forum only?

[SuperFly]

Honestly if your still getting the redirects, your ++++ed up at securing your site, im freaking running the original still and no problems yet, ive had attempts by so called hackers, but they blow ass chunks.

[Codeman05]

Is there anyway to optimize the query that grabs the latest posts/threads?

That is the only function of the TopXstats that I'm using, and lately that one query has been tripling my page generation times (0.15 with topxstats off, .6+ with it on). Thats still not bad, but if its possible to reduce that load, that would be great as I'm pretty sure its going to keep getting larger as the number of posts increases

[JMH11788]

I've used this hack for about 2 months now and I have something to say about it.

I like the hack, very good idea.

What REALLY needs attention is how it pulls the threads and members. For example, I have the Awaiting Email Confirmation usergroup set to not show on the members list. This stat box shows them though.

The latest threads needs to utilize a permission based method. Since I'm the admin I have access to all the forums. I have to put in each forum that I don't want to show up on the current mod. It would be much better if it showed all of the posts for me, but someone who doesn't have permission to a specific forum won't see it in the stats box.

Just me two cents.

[secretgol]

Hello, how can i add 2 topxstats at the same time? or is it possible?
i'm sure many of ppl here will need this answer sooner or later ;)
Thanks a lot

[Raptor]

confirmed working with 3.6.4

[M4H]

I am trying to find a way to change the Newest Members, to the Most Thanked (Thanks Hack.) Can anyone help?

[roe]

how can i change the title/link from "statistics - top [x]" to a custom phrase?

[Shazz]

how can i change the title/link from "statistics - top [x]" to a custom phrase?

When you change the amount like last 10 or 5 the number will change on its own :o

[Snake]

Thank you. I have re-installed this once again and works fine on 3.6.4. :p

[roe]

When you change the amount like last 10 or 5 the number will change on its own :o
i may not have been clear, but i would like to change the entire phrase. to "my custom title" instead of "statistics - top x"

[secretgol]

Hello, how can i add 2 topxstats at the same time? or is it possible?
Thanks a lot

:o .

[afterglow]

Could anyone point me to where i can get info on how to replace the New and Old text to an icon or image? I've seen a lot of vb site using this mod and i've seen an icon instead of a text. I find it pretty cool so i want to know what changes are needed to display the Top Stats like that.

regards,
afterglow

[Delphiprogrammi]

Could anyone point me to where i can get info on how to replace the New and Old text to an icon or image? I've seen a lot of vb site using this mod and i've seen an icon instead of a text. I find it pretty cool so i want to know what changes are needed to display the Top Stats like that.

regards,
afterglow

look in your vBulletin option => topXstats settings => prefix shown for new posts & prefix shown for old posts if you add some html there for displaying an image ..... ?


<img src="/path/to/myfile.gif" width="width" height="height" alt="new post ! ">

[Snake]

I think I'm having a problem here. Sometimes this hack stretches away my forum skin but because of the long thread titles. How do I fix this?

My forums are located here - http://www.finalfantasyforums.net

[afterglow]

look in your vBulletin option => topXstats settings => prefix shown for new posts & prefix shown for old posts if you add some html there for displaying an image ..... ?


<img src="/path/to/myfile.gif" width="width" height="height" alt="new post ! ">


Thanks for the hint. I'll try that one today.

regards,
Afterglow

[GD_Mehmed Emre]

Is it okay if I use this hack with 3.6.4

[Shazz]

Is it okay if I use this hack with 3.6.4

Yes its fine.

[MistaMarkael]

so are the top reputations added to this hack yet?

[Shazz]

so are the top reputations added to this hack yet?

Don't think so =\

[MistaMarkael]

<a href="http://www.offtopicz.com/" target="_blank">http://www.offtopicz.com/</a>

well any idea what hack they used at the bottom of their forum?

[Shazz]

cyb- advanced forum statistics

[MistaMarkael]

cyb- advanced forum statistics

are you an admin?

this is not the first time ive been able to count on u for answers


thanks:up:

[Lord Kirken Mor]

is there a Demo of this? or an example?

[Hornstar]

Just wondering will threads show in the latest threads for people who dont have permission in that forum? or do we have to just exclude that forum altogether, eg. staff section threads, i dont want normal members seeing the title. thanks.

[Shazz]

are you an admin?

this is not the first time ive been able to count on u for answers


thanks:up:

Admin of this site? no I should be though lol :)

Your welcome :D

[Shazz]

is there a Demo of this? or an example?

View screen shot provided at the bottom...
little thumb nail

[mescalin]

i have a problem with the characters in the last posts. Some non english chars are replaced with strange chars.. any idea foa a solution?

[Shazz]

i have a problem with the characters in the last posts. Some non english chars are replaced with strange chars.. any idea foa a solution?

This isen't currently supported by the author :|

[mescalin]

This isen't currently supported by the author :|

:( thats too bad. I hope there will be support for non-english chars in the next release..

thanks for the reply..

[Xoxideforums]

wrong plugin for what i was looking for

[mescalin]

" ' " char etc is not showing up correctly.. still it has some bugs i think..

[Chester_Lou]

how about refer stats in this mod?

[MacGyveR]

- Top 'X' Stats Version: 1.2.2 --- Vb 3.5.x & Vb 3.6.x
-- Vb 3.0.x ???? :(

[toneloc]

All of my NEWEST members have "0" posts, how do I change that to the "JOINED DATE?"

Thanks!

[USAMustangs.com]

nice hack, but how do you put this underneath the navbar instead of at the bottom of the page?

vb 3.6.5

thanks.

[USAMustangs.com]

thanks animewebby. I moved the stats to the top of the forum by including it under the navbar in the forumhome and I thought it'd look nice to have the other stats box run underneath it as well. I'll be messing around with the code you provided to see if I can figure something out, thanks again.

where exactly did you put the code to make that work?

[Lapsetur]

Is there anyway to show the new threads on a separate part

[JamieLee2k]

Simple question, yes or no

Has this hack been fixed for the vulnerabilities that have been reported at vb.com?
(I know it says so but that was back in 2006)

[FreshFroot]

don't use this hack.. it should be closed.. there is a hack like this by CYB, use that one. THis one is hackable still.

[USAMustangs.com]

don't use this hack.. it should be closed.. there is a hack like this by CYB, use that one. THis one is hackable still.

i've been using this hack on vb 3.6.5 for a while now and it works great.

what exactly are the vulnerabilities people are talking about?

[FreshFroot]

I can't remember HOW they hack it, but trust me, my older forums were hacked through the area. I'd advise you get a new hack, if the hackers find it... your screwed.

[Shazz]

I can't remember HOW they hack it, but trust me, my older forums were hacked through the area. I'd advise you get a new hack, if the hackers find it... your screwed.

If you can't really give much more info then "They used this hack to hack my board" I don't see how it has vulnerabilities

[Shazz]

Also if it is like that, Im sure it would be closed imeditly like vBPlaza did

[FreshFroot]

mabye.. but what's the point of this hack now. I'm not bashing the author, he did a great job on it. But people like Cyb have enhanced this style of hack now.. so basically this should be in an archieve...

[Shazz]

mabye.. but what's the point of this hack now. I'm not bashing the author, he did a great job on it. But people like Cyb have enhanced this style of hack now.. so basically this should be in an archieve...

I actually like this one better.
You can't get rid of old mods/hacks based on opinion or whats better, variety is always good

[FreshFroot]

I actually like this one better.
You can't get rid of old mods/hacks based on opinion or whats better, variety is always good
I didn't say we should chuck it away :P If people want to use it, sure go ahead. I was just letting people know of other hacks, incase they feel they need more or a supported hack like Cyb's.

[powerbook]

Anyone added a column with date or time to the "Latest Replies"?

[unknownkind]

Does this hack work with 3.6.7?

Thanks..

[Shazz]

Does this hack work with 3.6.7?

Thanks..

It says it on the post, read at the very top right after "Security" :)

[Matt_270581]

Edit: n/m found it.

[Mudvayne]

There is a slight typo on that fixed. For that typo it is not valid XHTML transitional. Here is the fix. Just re-import the product allowing overwrite option. For those who don't want to re-import. Search in topXstats_thread_bit template:
</stong>
Replace it with:
</strong>
:p

[rotti]

hi,

which version is that?

[Mudvayne]

hi,

which version is that?
Cyb - Advanced Forum Statistics (https://vborg.vbsupport.ru/showthread.php?t=122986)

[MissKalunji]

i want to exclude certain usergroup How can i do that?