I had to remove the mysql_real_escape_string() from around the format search input for it to work. Anything better I could replace it with? We use mysqli if that matters. Its working fine without any function wrapped around it, but not sure if that could lead to other issues on the textbox input on product title searches.

I noticed that in your code, you don't include a link identifier on the mysql_real_escape_string:

if($vbulletin->GPC['title']){ $conditions .= " AND pfp.title LIKE '%". mysql_real_escape_string($vbulletin->GPC['title']) ."%'"; } // title of product

It should default to the last used connection, but in my case I think it's not. In the meantime, I've switched to mysql_escape_string() which appears to be working. Do you see any issues with this?

Also all new reviews go into moderation even though I have the option turned off and made sure the forum have all moderation turned off. Thought it might be a conflict with Glowhost so uninstalled that and they still get moderated.

Anyone have an idea of how to add an attachment option to the post new product page?

(productforums.php?do=addproduct)

Sounds like my comment didn't come ascross right...

The business we run that inspired PRF processes something like 14 million products nightly from hundreds of thousands of manufacturers. And that's small potatoes compared to what our partners do... There's no problem with the structure of how the brands are stored whether you have 1, 100 or 10,000. We have the limit clause in for database speed but as you noted, it's no big deal to remove and perhaps something we can make an option of.

The issue however is in the presentation and resulting UX.

PRF was designed for the typical community owner who, to this point, is generally adding at most a few hundred products from a few dozen brands. As such a dropdown works fine.

However at a scale of say 50 [you'd have to test to find the actual threshold] dropdown lists become unusable for the user. Technically they still work, still load but it's just not feasible to scroll and mentally process. Thus you either need an open search field or progressive autofill...

While it's not a built in feature we designed PRF as a starting place to cover 90% and this is one of those 10% items worth customizing given your particular use yourself. But of course that's just my $0.02

There is no simple way to do this. You can however very easily add them to the first post in the product's thread :D

Escaping the string is essential for preventing injections so good call on working through that...

We'll be redoing the search function a bit in light of your bug report and will try to test with a few mySQLi connections as well.

Does the forum allow for new replies? Closed forums seem to have this issue...

I'm not disagreeing, just stating that you could come across this when importing large amounts of products. Now if someone searches this thread, they will know why. :)

Yes, everything is open. We are using the forumdisplay.


User posts a review. It gets put in moderation, but it still posts the review.

Now it gets strange. It posts the review twice (within the same post). You will get <review><br><review> all within the postbit. The <br> is visible. This seems to happen with users copying and pasting with or without WYSIWYG on.

Now usually as we know, a new post will update the sorting order (newest post first). Even though the review is posted, the forumdisplay will not update the sorting order until I approve the post (review).

So I'm clear only 1 post is made, but with duplicate content in it, and it's always in moderation?

Yes. User "submits" one review but the content gets posted twice within postbit with a visible <br> in between.

Every review goes into moderation even though I have moderation turned off within the plugin as well as in the forum. I don't think it shows the <br> and duplicate content within the moderation window. I will check and see next time it happen.