vb.org Archive - Miscellaneous Hacks - Patched Flash Uploader to Fix Known Exploits

Page 3 of 3

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)

- - Miscellaneous Hacks - Patched Flash Uploader to Fix Known Exploits (https://vborg.vbsupport.ru/showthread.php?t=307008)

alexm

04-26-2014 01:30 AM

Not sure what to suggest... presume you've tried re-uploading all the vBulletin files in case something got corrupted during transfer? (remember to replace uploader.swf again afterwards!)

If that doesn't do it then maybe try reverting any relevant templates?

rharbison

04-26-2014 03:15 AM

Alex, yep, tried re-uploading.

My templates are all stock, I've run VB for many years ago, and long ago tired of customizing everything like a kid putting rims and spoilers on his new ride, only to have a new release require them to all be done over. I now run my forums as stock as I can possibly get and try to do any customizing, like ads, from within the framework.

What's really strange is why a couple forums on the same server would have one not work and another one work. But in any case, I decided I'd had enough hassles to trying to make it work and decided that was going to be my XF testbed.

weave

04-27-2014 11:23 AM

This is no longer working for me on 4.2.2 PL1 either. Clicking the button does nothing at all.

I have made sure I have the right file and settings no less than 3 times.

I have run the maintenance test, no issues found.

I have tried with.

APPLE:
Safari
Chrome
Firefox

Windows7:
IE 11
Firefox

Windows8:
IE11

The ONLY time I got it to work was on Windows with IE and all plugins/hooks disabled. It still was not working on the others.

Any ideas?

Thanks

alexm

04-28-2014 08:55 AM

Quote:

Originally Posted by weave (Post 2495038)

This is no longer working for me on 4.2.2 PL1 either.

I have made sure I have the right file and settings no less than 3 times.

I have run the maintenance test, no issues found.

I have tried with.

APPLE:
Safari
Chrome
Firefox

Windows7:
IE 11
Firefox

Windows8:
IE11

The ONLY time I got it to work was on Windows with IE and all plugins/hooks disabled. It still was not working on the others.

Any ideas?

Thanks

Need more info. What is actually happening?

weave

04-28-2014 02:55 PM

Quote:

Originally Posted by alexm (Post 2495130)

Need more info. What is actually happening?

Nothing. The button is there but clicking it does nothing at all.

alexm

04-28-2014 06:09 PM

Have you tried all the following?...

1) Make sure the flash uploader is enabled in the Admin Control Panel

Options -> Message Attachment Options -> Asset Manager - Enable -> Select "Yes, Flash Upload by Default"

2) Make sure you are NOT using remote YUI

vBulletin Options -> Server Settings and Optimization Options

Use Remote YUI set to None

3) Clear your browser cache

4) Clear VB cache

Maintenance ->Clear system cache

Can you PM me a link to your forum and a test account with upload permission and I'll try to take a look?

weave

05-01-2014 03:16 PM

Quote:

Originally Posted by alexm (Post 2495191)

Let me add the SWF back and will send you the PM with the logon info.

Thanks.

weave

05-01-2014 05:22 PM

Quote:

Originally Posted by weave (Post 2495654)

Let me add the SWF back and will send you the PM with the logon info.

Thanks.

So now, for whatever reason, this is ALL working on my MAC.

I tested with:
Safari
Chrome
Firefox

And it all working.....but I did not do anything any different than before.

Mickie D

05-03-2014 05:02 PM

great work thank you!

cloudfarmer

05-15-2014 06:45 PM

woo hoo!! thankyou so much. To anyone else that is completely new at this sort of thing, you must delete your browser cache if using Chrome. I kept missing this step and it would not work.

using 4.2.2

sstiller

06-01-2014 06:58 PM

Many thanks! It works

alexm

06-06-2014 10:47 AM

Quote:

Originally Posted by rharbison (Post 2493864)

Update - The problem seems to be in VB 4.2.2 itself, even when using the 0 byte version of Uploader.swf, the problem still exists.

VB 4.2 PL 1 seems to have broken this. With the modified version of uploader.swf, the images SEEM to work. While editing your message they show up in the post just fine. However... When you save the message, you only get a link to the attachment, not the image.

Anyone else seeing this? Anyone got a solution?

I just spotted this reply to your thread on vb.com

http://www.vbulletin.com/forum/forum...39#post4047539

For anyone else experiencing this issue:

Quote:

I figured out my issue. Under General Settings>Disable AJAX Features, I had "Disable problematic AJAX features" selected. When I went back and selected "Enable all AJAX features", the quick reply started working properly again.

webducknj

08-26-2014 03:03 AM

does this patch allow you to upload more than 10 files at a time as attachments?

thanks,
bart

Zachery

08-26-2014 04:34 AM

The number of files allowed to be uploaded at once (outside of having flash) is limited by a lot of factors.

webducknj

08-26-2014 11:19 AM

i've seen vb sites where uploads of 100 or more files is possible. so it's just a matter of finding the right developer to fix it?

suggestions/referrals appreciated.

and thanks for the reply.

Zachery

08-26-2014 02:49 PM

There are a lot of things that come into play with uploading lots of files. More than just the flash uploader.

Jennifer2010

10-07-2014 05:00 PM

New error: Latest version of FireFox appears to create the file selection dialogue behind all other windows after clicking the "Select Files" button. I've verified this on my end and all of my forum's members seem to experience this. Can anyone else verify and possibly provide a solution?

Mark.B

10-08-2014 07:38 AM

I'm on the latest Firefox and that isn't happening.

Try it with a default style.

alexm

10-08-2014 11:34 AM

Quote:

Originally Posted by Mark.B (Post 2518107)

I'm on the latest Firefox and that isn't happening.

Try it with a default style.

+1

I've just recommended the same thing in the OP's thread on vb.com

alexm

10-08-2014 11:39 AM

Actually, didn't you have a problem before relating to a custom style/button?

Bet your problem is there!

Quote:

Originally Posted by Jennifer2010 (Post 2491542)

Problem resolved:
We have a custom "Upload Images" button that calls the same function as the insert image button does on the post editor. However, after we upgraded to 4.2.2 it must not be compatible. Thus, all we have to do now is find the new code and it should work (default vb style works perfect)

I can't remember where I found the old code:
<span class="cke_button">
<input type="button" style="height: 30px; width: 100px; font-size: 14px; margin-top: 15px;" a id="cke_38" class="cke_off cke_button_vbimage" onclick="CKEDITOR.tools.callFunction(77, this); return false;" onfocus="return CKEDITOR.tools.callFunction(76, event);" onkeydown="return CKEDITOR.tools.callFunction(75, event);" onblur="this.style.cssText = this.style.cssText;" aria-labelledby="cke_38_label" hidefocus="true" tabindex="-1" value="Upload Images">
</a>
</span>

Anyway it's not a server issue anymore, lol.

z3r0	10-10-2014 08:12 AM

Quote:

Originally Posted by Jennifer2010 (Post 2518034)

Yep, I've just noticed this myself.

Edit - It seems to be a bug in Firefox, a quick google turns up the XF guys working out a fix for their software here - https://xenforo.com/community/thread...-3#post-832948

tbworld

10-10-2014 07:19 PM

Thanks for sharing some clarity on the subject. :)

MrD	11-15-2014 11:56 AM

Hi,
the Uploader are not Working about 5 days?
The other Time, it´s worked perfect.

vb 4.2.2 pl2

alexm

11-15-2014 07:16 PM

What's actually happening? If you just upgraded to PL2 did you remember to re-upload uploader.swf?

MrD	11-16-2014 09:58 AM

Hi,
the Window with the Files are not open. only the overlay window.
yes i upgrade to 4.2.2 and i re-upload the swf.

But now it works, after i clear my cache.
It?s Amazing :rolleyes:

Lightly_Toasted

11-30-2014 11:53 PM

Stopped working out of the blue, went back to ajax and a blank swf file and uploads began working again.

ozzy47

11-30-2014 11:59 PM

That is because in the latest 4.2.2. patch and 4.2.3 this is included in the vb core. :)

dougdirac

12-08-2014 02:51 AM

Does this patch still work or is it still needed after upgrading to 4.2.3 Beta?

ozzy47

12-08-2014 09:04 AM

IIRC, this is included in 4.2.2. pl2 and 4.2.3

alexm

12-16-2014 01:52 PM

For info

This patch is now included in 4.2.2 PL2/PL3/PL4 and 4.2.3/4.2.4/4.2.5 core downloads from vBulletin. If you are running 4.2.2 PL2 just check the version of uploader.swf you have as the earliest download package had the wrong version. I guess this is why uploader.swf was included again in the 4.2.2 PL3/PL4 patches just in case. It should be 7,410 bytes.

uploader.swf file hashes:

MD5: A2D3F12746C4552FA0757DB6D2D23F84
SHA1: 9F1A68F926BF3D9C9FF8848CB51561783A8A31FA

patracy

12-20-2015 12:19 PM

I tried this with my board 4.2.1, but the select files button does nothing?

MrD	10-20-2016 09:16 AM

Hi,
after the new flash update the Uploader don?t work :(

Dragonsys

10-20-2016 03:34 PM

Quote:

Originally Posted by MrD (Post 2577102)

Hi,
after the new flash update the Uploader don?t work :(

What version of VB are you using?

MrD	10-23-2016 10:51 AM

Hi,
Vb4.2.3PL2

After Right click at the Button (that the flash Menu is open) and another click at the Button the uploader works.

All times are GMT. The time now is 04:56 PM.

Page 3 of 3

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01320 seconds Memory Usage 1,809KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (10)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (2)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (34)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: