vb.org Archive - Vbjokes

Page 3 of 23

Last »

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- Modification Graveyard (https://vborg.vbsupport.ru/forumdisplay.php?f=224)

- - Vbjokes (https://vborg.vbsupport.ru/showthread.php?t=98248)

micheal332001

10-12-2005 10:36 PM

Quote:

Originally Posted by Barakat

what a great hack for the vbulletin .... i was searching on it all the time....

thanks for sharing it ...

Your very welcome glad it can be of use to you all.

Cyricx

10-12-2005 11:05 PM

Isn't there a way to change that to html marks like the & or whatever that the database uses for apostrophes?

Ideas for future versions -

Usergroup permissions to view jokes.

Blaine0002

10-13-2005 12:08 AM

hey you can use this i dunno how but maybe some code in the vbjokes.php file that finds all

Code:

'

and replaces it with

Code:

´

which looks kinda like an apostraphe :P

TCM	10-13-2005 02:48 AM

So does this allow HTML?

I see abuse possibilities.

micheal332001

10-13-2005 07:45 AM

Quote:

Originally Posted by TCM

So does this allow HTML?

I see abuse possibilities.

This can only use limited html like <br> and other tags like that.
All jokes have to be approved be for any joke is viewable by the members.
The joke is only inputted as text to the database.
So you are limited on the tags you can use.

micheal332001

10-13-2005 07:46 AM

Quote:

Originally Posted by Blaine0002

hey you can use this i dunno how but maybe some code in the vbjokes.php file that finds all

Code:

'

and replaces it with

Code:

´

which looks kinda like an apostraphe :P

I like this idea i will have alook round to see if this can be done.

micheal332001

10-13-2005 10:37 AM

Hi all i have found a fix for the inputting of a joke.

Find this in vbjokes.php

PHP Code:


		
			
$jokename = $_POST['jokename'];
  $jokediscription = $_POST['jokediscription'];
  $jokeimage = $_POST['jokeimage'];
  $jokecatid = $_POST['cid'];
  $approve = 0;

Add under

PHP Code:


		
			
$jokediscription = ereg_replace("'","''",$jokediscription);

I will upload the fixed files in about 10 mins

micheal332001

10-13-2005 11:01 AM

fixed files uploaded

eXtremeTim

10-13-2005 11:52 AM

I would have used the addslashes function myself.

Also what are you doing with this lol.

Code:

$areyouamember = $db->query("SELECT userid FROM " . TABLE_PREFIX . "user WHERE userid = '" . $userid . "'");

so we are grabbing into that we already have ;)

Looks to me like its some kind of reminents of the league hack.

Also this allows users to add jokes and then admin approval. Only problem is it looks to me like you let them use html which is a bad thing. I also am not seeing any data validation here.

Meaning I could easily take over any site using this hack. Please use data validation. If you need help with it please contact me. This hack has potential but it needs work. Please contact me so I can help you get this all cleaned up. ;)

Blaine0002

10-13-2005 12:37 PM

its checking to see if the user is logged in / registered :P

All times are GMT. The time now is 04:47 AM.

Page 3 of 23

Last »

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01160 seconds Memory Usage 1,744KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (5)bbcode_code_printable (2)bbcode_php_printable (3)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (1)pagenav_pagelinkrel (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: