anybody??

also get this in the shoutbox itself

Database error in vBulletin 3.5.3:

Invalid SQL:

select s.*, u.username, u.usergroupid from shout s
left join user u on (u.userid = s.s_by)
order by s.sid desc limit 20;

MySQL Error : Table 'meogeec_forumnew.shout' doesn't exist
Error Number : 1146
Date : Friday, April 21st 2006 @ 09:16:09 AM
Script : http://www.meogee.com/vbshout.php
Referrer :
IP Address :
Username : Mikecp421
Classname : vb_database

Thats what happens in a normal post :p

Mike, you just uploaded the new file and it is causing the problem?

actually the first error message is the error I got when I tried to uninstall via the Product manager in the ACP the second (which shows in the shoutbox itself) is what I got when I manually replaced both files. I uploaded the xml and then imported it via the product manager allowing an overwrite and I replaced the php file int he ftp.

All you needed was to upload the new file, nothing else.

The error was from after you uninstalled the hack.

just installed the new file....is there a way to allow certain characters???

i tried to type 3" k&n filter and it came out 3" k&n filter.....

does anyone know how to remove the brackets when it shows the time. I want to remove the time and the bracket from the shoutbox

The original error was from trying to uninstall the hack as the upgrade instructions instructed me to do. So what do I do now?

this is the upgrade instructions;

note the bolded field, thats where it all went wrong

this still isnt working...followed the instructions to the letter, and im getting this :

not sure if this is known but typing a double quote results in "

so its DEFFO not fixed yet then....??

Can u limit a user to a certain amount of posts? For example, user can post upto 20 messages?

will an update fix the " "" issue? when you use qoutes it gives you " ""

No Giz it's not fixed... can't use quotations marks or arrows without getting the weird stuff.

How do you clear all shouts or a specific number of shouts? Say the last 5 or six? I see this command: but not sure what to enter to get this command to work in shout box
Never mind... I found the answers in the first 21 pages of this.
Here are the commands:

To Delete a single shout:
/pruneshout and the text of shout

Example:
[1 Minute Ago 12:39 PM] CP: Test

to delete this in shoutbox type:
/pruneshout Test



To Delete all Shouts:
/prune


To note you saying or doing something
[high][/high]

Example:
[high][/high]
displays this:

[1 Minute Ago 12:41 PM] *CP This shout box Rocks*

I've made the staff aware that the fix causes a problem,. they are looking into it.

I updated my post above to help new users. I do have a question. How do I access the stats for the shout box? As shown in the stats image in the top post.

A little issue with the update, if you put a number in the show smilies setting that is greater than the number of smilies you have it doubles them up, simple fix by adding a count to the returned sql queery and and a if > comparison.

Click the title of the shoutbox, that will bring you to that page.

I have a question on the prune command, does that just clear the shouts, or will it reset the shout counts too? I don't want people to lose their shout count.


P.S.: Glad I didn't update right away when it came out, I don't have that char problem.

even the shouts AND the counters will be set to zero ;)

Ok, thanks alot. Guess I won't be pruning anytime soon.

THANKS! It is the obvious we overlook!

ok i see brad posted a fix but wasnt this a exploit too in it 'shout' => TYPE_STR, as per this post https://vborg.vbsupport.ru/showpost....postcount=1192 or does brads update fix this?

thank you Zachery... it's really causing a stir on my site, lol

Brad's update didn't fix the current problems

can someone please tell me how to purge the shout box of the shouts that have been made in the past?

Thanks. Baudman

THIS VB SHOUT.... causes my HOST Memory To skyrocket!.

:smh:..... gotta patch that somehow guy.

As stated here, /prune

Hi Guys

I would like to know how to set different user groups for the shoutbox. I know one site where the guy has added a /mod command. When using this command only people with moderator status and up can view what theyre saying. I would like to know how to do this, so if anyone has any ideas please let me know as it would be much appreicated.

Many Thanks

Ben
undergroundportal.co.uk

Does the edit function work after the update? if so i must be pure stupid as i cant figure out how to edit a shout by one of my users - edit found it :D

Hi @ll,

have executed the Security fixed, don't know if its linked to my Issue :

A User is using bbcode in the Shout like

[img ] link to an image with a .htaccess protected folder [/IMG ]

So then all Users getting to Popup to Enter Username and Password. This could be also a security Risk .....

How i can handle this, should i disallow bbcode in the Shoutbox ?

th@nks

Thats not a direct security risk anyone can control, anyone could post a picture to an image thats behind htaccess on anywhere you allow the image bbcode.

So then the Smiley Function is not working anymore, because you have to deactivate the vBCode/Smilies Function.

Any possiblity to disallow the external linking in the Shoutbox ?

ok maybe they will answer this time...

ok i see brad posted a fix but wasnt this a exploit too in it 'shout' => TYPE_STR, as per this post https://vborg.vbsupport.ru/showp...postcount=1192 or does brads update fix this?

i have it loaded on my site all it says is Loading and never does whats the deal?

I got probem after updating the vbshout_fix . I can not type " ... " anymore . The quotation mark doesn't work , please check it out !!!

Lol you can always tell the people that don't read before they post. They're looking into it, it has to do html not being allowed. Just scan some previous posts, it's all there.

It didn't happen with orginal vbshout 2 on my board !!

Yes my update fixes that issue, although it does not restrict input to NOHTML, it simply cleans it when it's called from the database.

My update fixed only one problem and that was allowing users to inject html. :)

Strip_tags will give you results that are just as bad. For example try posting this in the shoutbox "& <-- no &amp;" this will display "&" because everything after < is stripped.

Update

I've uploaded a new version of this hack, dubbed '2.0.2'. This one should fix the issues without breaking special characters. To upgrade, download the new zip file and upload the new vbshout.php file.

Please note that this only fixes the html injection issues. I do not use this hack on my own forum (although I've tested this on a client's board) so I will not be fixing the server load issues. I suggest you do not install this hack if you can't deal with the extra server load, as it's rather intensive.