vb.org Archive - Miscellaneous Hacks

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 3.8 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=235)

- - Miscellaneous Hacks - Live Topic (https://vborg.vbsupport.ru/showthread.php?t=201228)

Why is this stated as incompatible with Passivevid 1.x?
I'm running both and they seem to be working fine.

Right...... despite the server loads I've decided to try this again lol

Now ...... from what I see on the video the thread should auto update WITHOUT having to
refresh?

The live topic image appears fine but at the moment I'm sitting on a thread awaiting summit happened and its just not lol

I'll refresh after the idle time is up to see what's what LOL :D

How do I only allow certain usergroups to have this functionality? Are there edits I can make in your files, to accomplish this?

How do you resolve the incompatibility with the 'Prevent double posting' Hack? Is there a fix?

I installed your product on my test forum. Here's the error on import:

Code:

Importing Product, Please Wait...



[:]



Warning: file_get_contents() [function.file-get-contents]: URL file-access is disabled in the server configuration in [path]/admincp/plugin.php(1995) : eval()'d code(2) : eval()'d code on line 1



Warning: file_get_contents(http://track.scriptasy.com/livetopic/1.05b/www.mysite.com) [function.file-get-contents]: failed to open stream: no suitable wrapper could be found in [path]/admincp/plugin.php(1995) : eval()'d code(2) : eval()'d code on line 1



Message



    Product livetopic Imported

I enabled this hack again, making the request time from 3 to 5 seconds. My load just increases a little but it never went up to 20 like last time.

Code:

top - 00:11:45 up 1 day, 8:28, 1 user, load average: 1.43, 1.30, 1.39

I am happy for now :D

How can I troubleshoot this hack?

I have installed it on vB3.8.0 at http://www.automotiveforums.com/vbulletin/ but the AJAX does not seem to do anything. The LiveTopic image does show up and then disappears after the specified time of inactivity.

Quote:

Originally Posted by Coders Shack (Post 1738780)

it already does this :)

Then I'd prefer this behavior anyway. :)

Does this still have any issues with the leaderboards hack? I would love to install this, but I already have that installed as well.

I have a couple of questions.

One relates to the packed/minified javascript. I want to remove the notice that tells people it's a live topic... or re-format it... it's ugly.

So I'm guessing it's written by the javascript, so I would like to see the unpacked JavaScript to adjust it. OR have the additional notice templated in the vBulletin template system.

Next up is security. I got a few errors through:

PHP Code:


		
			
Database error in vBulletin 3.8.1:

Invalid SQL:

                                        SELECT COUNT(*) AS count
                                        FROM vb_post AS post
                                        WHERE
                                                (threadid = 14030
                                                AND visible = 1
                                                AND dateline > 1234287978.:
                                                AND userid != 217)
                                                OR (threadid = 14030
                                                AND visible = 1
                                                AND lastedit > 1234286762);

MySQL Error   : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ':
                                                AND userid != 217)
                                                OR (threadid = 14030
                                                AND visible = 1
                                ' at line 6

Now where did that come from?

Checking the php source it seems that you just take the POST'd value and put it straight into the MySql script. Is that correct? If so... BIG ++++ING SECURITY HOLE. Because you've just allowed SQL injection.

Could you confirm whether you really are taking $_POST['value'] and using it directly in the SQL, because you REALLY REALLY need to change that before something very bad happens.

Actually, just seen that you do this:

PHP Code:


		
			
                $_POST['threadid'] = $vbulletin->db->escape_string($_POST['threadid']);
                $_POST['ajax_lastpost'] = $vbulletin->db->escape_string($_POST['ajax_lastpost']);
                $_POST['ajax_lastedit'] = $vbulletin->db->escape_string($_POST['ajax_lastedit']);

So you are escaping... just numbers as strings.

Weird though... how did ".:" get into the posted info on some requests?

I had about 20 of those errors over a 5 minute period.

Anyone have any issues with guest posting? I'm upgrading to live topic 5b from 4b hope that fixes my issues.

X vBulletin 3.8.12 by vBS Debug Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (2)bbcode_code_printable (2)bbcode_php_printable (1)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (3)pagenav_pagelinkrel (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages:

Phrase Groups Available:

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.02918 seconds Memory Usage 1,763KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (2)bbcode_code_printable (2)bbcode_php_printable (1)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (3)pagenav_pagelinkrel (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: