vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)
-   -   New Posting Features - vS-Hide Hack Resurrection (https://vborg.vbsupport.ru/showthread.php?t=237057)

NovoCiv 11-16-2010 04:56 PM

We have noticed that hidden content can be found by quoting a post. I've narrowed it down to the newpost_quote template, and in styles where I remove the {vb:raw pagetext} from the template the vulnerability is removed (at the cost of quoting). I think the best solution would just be to add some command in the code to parse all BB code. I just don't know enough PHP to know what command to use. Here's an example of what I mean (I know parsebbcode() isn't real).
Code:

ORIGINAL:
[QUOTE={vb:raw originalposter}]{vb:raw pagetext}[/QUOTE]
FIX:
[QUOTE={vb:raw originalposter}]parsebbcode({vb:raw pagetext})[/QUOTE]

Anyone have ideas?

motorola 11-19-2010 08:31 PM

Quote:

Originally Posted by dcuellar (Post 2121440)
Hey vS,
I asked about this on a previous version and you said you were going to look into it. Can you add the ability to view content for x amount of vbcredits?

+1

I'm also interested to have this

bigrover 11-20-2010 02:44 AM

Quote:

Originally Posted by NovoCiv (Post 2119176)
I did this and now both hide and showtogroups makes the message invisible to everyone. I don't even see "This message is hidden", its just as if I didn't type anything.

I went back in and looked at my adjustments to this mod and they are as I posted. It does prevent the hidden text from being quoted. If you look at the code snippets closely, you will see I am really only adding a single line after the opening braces of the if statement:
PHP Code:

// hack trying to fix HIDE without options
            
$message preg_replace("/\[(" $this->tags['SHOWTOGROUPS'] . ")\](.*)\[\/\\1\]/siU"$replacement$message); 


NovoCiv 11-20-2010 02:56 AM

Quote:

Originally Posted by bigrover (Post 2123739)
I went back in and looked at my adjustments to this mod and they are as I posted. It does prevent the hidden text from being quoted. If you look at the code snippets closely, you will see I am really only adding a single line after the opening braces of the if statement:
PHP Code:

// hack trying to fix HIDE without options
            
$message preg_replace("/\[(" $this->tags['SHOWTOGROUPS'] . ")\](.*)\[\/\\1\]/siU"$replacement$message); 


I know. That breaks the mod so that HIDE doesn't show up at all. See this post:

We have noticed that hidden content can be found by quoting a post. I've narrowed it down to the newpost_quote template, and in styles where I remove the {vb:raw pagetext} from the template the vulnerability is removed (at the cost of quoting). I think the best solution would just be to add some command in the code to parse all BB code. I just don't know enough PHP to know what command to use. Here's an example of what I mean (I know parsebbcode() isn't real).
Code:

ORIGINAL:
[QUOTE={vb:raw originalposter}]{vb:raw pagetext}[/QUOTE]
FIX:
[QUOTE={vb:raw originalposter}]parsebbcode({vb:raw pagetext})[/QUOTE]

Anyone have ideas?

luckid 11-22-2010 03:26 AM

My PAID license not work !!!!

Luckid..... !!!!

bigrover 11-22-2010 01:59 PM

That is the point of the fix I posted. It is a correction of the bbcode parsing routines in the hide hack that were not processing correctly during quoting. If you look at the code, and the hooks you will see this was intended to do what the poster was requesting.

At this point I'm not sure what is going wrong for you. I have spent roughly 40 hours tracking through how this mod works and fixing things on my sites so that I have the results I need. You are going to have to invest the same if you don't get what you are looking for in this or any of the other hide mods out there.

I've looked back through my hacks to this mod, and they are minor and pretty simple. They work for me, but I don't know what else you have going on. Good luck.

Quote:

Originally Posted by NovoCiv (Post 2123743)
I know. That breaks the mod so that HIDE doesn't show up at all. See this post:

We have noticed that hidden content can be found by quoting a post. I've narrowed it down to the newpost_quote template, and in styles where I remove the {vb:raw pagetext} from the template the vulnerability is removed (at the cost of quoting). I think the best solution would just be to add some command in the code to parse all BB code. I just don't know enough PHP to know what command to use. Here's an example of what I mean (I know parsebbcode() isn't real).
Code:

ORIGINAL:

FIX:

Anyone have ideas?


NovoCiv 11-23-2010 04:17 AM

I don't understand php or vBulletin nearly as much as you. I made exactly the change you outlined and it caused hidden messages to not appear at all. I removed the change and it started working again.

andreamarucci 11-25-2010 12:33 PM

A question.

I would like that the text included in is only visible to admin specified usergroups.

Can I do that using this mod or do I need the expanded version? I don't need any other feature, just this one.

doopz 11-25-2010 12:42 PM

Quote:

Originally Posted by andreamarucci (Post 2125609)
A question.

I would like that the text included in is only visible to admin specified usergroups.

Can I do that using this mod or do I need the expanded version? I don't need any other feature, just this one.

Same thing for me.
I basicly just want our crew to be able to view the hidden text, everyone else no.

sulasno 11-25-2010 10:02 PM

there is an updated version at the developer's site


All times are GMT. The time now is 03:11 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01315 seconds
  • Memory Usage 1,755KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (3)bbcode_code_printable
  • (2)bbcode_php_printable
  • (5)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (2)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete