vb.org Archive - New Posting Features - [DBTech] Advanced Post Thanks / Like v3 (vB4) [AJAX]

There are forum permission checks in place that prevent people from seeing the content if you either can't view the forum, can't view threads in that forum or you do not have the password for that forum entered in their browser.

If the viewing user does not meet these criteria, they will see "-=Hidden Content=-" instead (same as if the post is hidden behind a HIDE tag).

While I appreciate you taking the time to post improvement requests for our mods, your post gives off the impression there is an actual security concern in this mod when, from multiple reports and tests, this is not the case.

Also, according to vBulletin.org you have not downloaded the product - was this posted in the wrong thread (vB3 vs vB4)?

If you're running the Pro version, please do be aware that we cannot offer support for the Pro version here on vBulletin.org.

Fillip

MagicPID

08-03-2013 07:11 PM

Quote:

Originally Posted by DragonByte Tech (Post 2436921)

I've used the mod for awhile on vb4 I must have just forgotten to click installed, I've done it now. I'm going to PM you a pdf file that one of my members made with some more information regarding it because my forum doesn't show the "-=Hidden Content=-" message.

I apologize for seeming as it is a big security issue because on my forum it is and I wasn't under the impression that it usually says "-=Hidden Content=-".

MagicPID

08-03-2013 07:27 PM

Quote:

Originally Posted by DragonByte Tech (Post 2436923)

Here's a couple of screenshots from our own forum:

https://www.dropbox.com/s/8jwhklmecj...2021.15.29.png
https://www.dropbox.com/s/nokhv7rm7t...2021.15.56.png

The first screenshot is taken from my account, where I clicked a button for a thread that's in our private staff room (thread title is harmless enough :p)

The second screenshot is taken as a guest, you can see it yourself by going to Mokonzi's profile here: http://www.dragonbyte-tech.com/members/666-mokonzi/
(Ignore his user ID, he's actually the nicest guy you'll ever meet in your entire life)

If this does not occur on your forum, then please double-check that you have set either Can View Forum or Can View Thread Content to No for all user groups the member in question is a member of.

Also check that there are no Access Masks running for these members.

Fillip

Ah okay the issue must be with the Can View Thread Content. I have it so that users can post to the higher up sections and only be able to see their own threads. So Can View Thread Content is enabled however Can View Other's Thread Content is not.

Hmm, I'll need to find a way so that users can still post to the sections while still keeping the rest hidden from them.

If you know of a solution that'd be great if not I'll need to figure out something.

Thanks for your quick replies, much appreciated! :up:

webspider

08-12-2013 04:52 PM

Quote:

Originally Posted by DragonByte Tech (Post 2434982)

Turn on the "Disable Postbit Stats Collapse" setting in the vBulletin Options.
Fillip

I installed the mod the admincp cache setting in settings is blank.

Gradonil_Ral

08-15-2013 07:43 PM

Quote:

Originally Posted by DragonByte Tech (Post 2434149)

Quote:

Originally Posted by IGOTASTi (Post 2434136)

Where and how would this problem show up in what kind of search:

In vBulletin version 4.0.6 and above, Internet Brands changed the way
search results were being shown.
Hidden content may be exposed unless you perform this file edit.

Searches that display results as posts, as opposed to as threads.

This edit actually blocked all post previews for me (when I searched for posts). I could only see the thread titles and the "preview area" displayed -=Hidden Content=- message instead.
What's worse, when I turned the plugin off, all post searches resulted in: "500 Internal Server Error"...

When I removed these lines it all went back to normal. No hidden content is displayed (at least I couldn't find any - I tested it on a few accounts with different permissions and with two separate browsers).

I'm not sure when the original problem actually appeared (I don't remember ever having it), but the one that this "fix" causes is much worse, IMO.

Norcal SS

08-18-2013 01:40 PM

If a user clicks a button by mistake how can they edit/remove their own action.

I could not figure this out.

ozzy47

08-18-2013 01:56 PM

That is available in the Pro version, Per-usergroup setting to allow removing a click of a button.

Bubble #5

08-18-2013 11:49 PM

1 Attachment(s)

Using 4.2.1. Is there anyway to clean up the code so that everything from this hack, aligns with the default vB code?

DragonByte Tech

08-24-2013 05:46 PM

No, due to the length of the phrases. Sorry.

Fillip

Bubble #5

08-24-2013 06:00 PM

Quote:

Originally Posted by DragonByte Tech (Post 2440771)

No, due to the length of the phrases. Sorry.

Sorry but I don't understand your reasoning. First of all what about the numbers? They are off too. In-fact everything is right aligned it seems by several characters. What if you abbreviated some things like received = recv'd? :confused:

All times are GMT. The time now is 08:57 AM.

Page 191 of 277

191

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.03404 seconds Memory Usage 1,752KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (6)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (5)pagenav_pagelinkrel (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: