vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 2.x Full Releases (https://vborg.vbsupport.ru/forumdisplay.php?f=4)
-   -   vBcustompage 1.0 (https://vborg.vbsupport.ru/showthread.php?t=41616)

DemiNeo0101 07-29-2002 12:22 PM

thanks hellsatan.

Chris M 07-29-2002 01:13 PM

Np...:)

Satan

LouChipher 07-29-2002 01:25 PM

a big hole - css etc...

can somebody code a blacklist for the html code? so you can lock abject html code...

DemiNeo0101 07-29-2002 02:01 PM

Quote:

Originally posted by Lionel
I get a blank page when I click on the link in profile.

$userinfo[custompage] returns empty, but the info is in the database

i get the same exact thing. I have that getinfo_custompage template and i ran the mysql querys.

im useing vb 2.2.6

Chris M 07-29-2002 02:12 PM

Thats strange...

I am running vB 2.2.6 and everything is running fine...

Satan

ripman 07-29-2002 03:47 PM

Mayby it would be good make something more than simple page - eg. everyone can make his own webpage - but the full one, including :

-Hiperlinks to other private pages within one account
-Images upload
-Without forum's includes (logo,buttons,etc)

What do you think about that ?

Chris M 07-29-2002 03:50 PM

Hmm...

Good, except for 2 things...

Images uploads - How do we know they wont upload p*rn?

Without forum includes - how will internet niave members get back to the forum easily?

Satan

Point Blank 07-29-2002 03:53 PM

Very nice hack. I will be using this in the future.

ripman 07-29-2002 03:56 PM

Hmmmmmm - I've removed that part of code but the problem's still there :surprised:

------member.php--------

PHP Code:

// ############################### start modify custompage by Velocd ###############################
if ($action=="custompage") {
  
$templatesused 'error_nopermission_custompage,error_nopermission_customposts,usercpnav,modifycustompage_bit,modifycustompage';
  include(
"./global.php");
  
// do modify profile form

  /* ODKOMENTOWAC JESLI STRONU PRYWATNE MAJA BYC TYLKO WIDOCZNE DLA ZAREJESTROWANYCH
  if ($bbuserinfo[userid]==0) {
    show_nopermission();
  }
  */
  

  
if ($bbuserinfo[posts]<1) {
      eval(
"standarderror(\"".gettemplate("error_nopermission_customposts")."\");");
  }

  if (
$bbuserinfo[enablecustompage] == 0) {
      eval(
"standarderror(\"".gettemplate("error_nopermission_custompage")."\");");
  }

  
// draw cp nav bar
  
$cpnav[1]="{secondaltcolor}";
  
$cpnav[2]="{secondaltcolor}";
  
$cpnav[3]="{secondaltcolor}";
  
$cpnav[4]="{secondaltcolor}";
  
$cpnav[5]="{secondaltcolor}";
  
$cpnav[6]="{secondaltcolor}";
  
$cpnav[7]="{secondaltcolor}";
  
$cpnav[8]="{firstaltcolor}";
    
$cpmenu[8]="class=\"fjsel\" selected";
  eval(
"\$cpnav = \"".gettemplate("usercpnav")."\";");

  eval(
"\$custompagebit = \"".gettemplate("modifycustompage_bit")."\";");


  
$custompage=htmlspecialchars($bbuserinfo[custompage]);

  eval(
"dooutput(\"".gettemplate("modifycustompage")."\");");
}


  
// ############################### start update custompage by Velocd ###############################
  
if ($HTTP_POST_VARS['action']=="updatecustom") {
    
$templatesused 'redirect_updatethanks';
    include(
"./global.php");

    
/* ODKOMENTOWAC JESLI STRONU PRYWATNE MAJA BYC TYLKO WIDOCZNE DLA ZAREJESTROWANYCH
    if ($bbuserinfo[userid]==0) {
      show_nopermission();
    }
    */

    
$custompage censortext($custompage);
    
$custompagename censortext($custompagename);

    
$DB_site->query("UPDATE user SET custompage='".addslashes($custompage)."', custompagename='".addslashes($custompagename)."' WHERE userid='$bbuserinfo[userid]'");

    eval(
"standardredirect(\"".gettemplate("redirect_updatethanks")."\",\"usercp.php?s=$session[sessionhash]\");");



------------------------------

ripman 07-29-2002 04:00 PM

Quote:

Originally posted by hellsatan
Hmm...

Good, except for 2 things...

Images uploads - How do we know they wont upload p*rn?

Without forum includes - how will internet niave members get back to the forum easily?

Satan

Hmm :
1. Image upload after X posts - that should prevent most people from "chating"

2. I ment that includes should be very small like a table with a theme chosen by user

3. One more thing. Every user can have pre-installed web page like.

Quote:

Hello, I'M $username. I live in $location ... etc :))
P.S I could write that hack but I'm new @ VB so knowing PHP is not enought :P


All times are GMT. The time now is 10:40 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01243 seconds
  • Memory Usage 1,756KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_php_printable
  • (3)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete