vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)
-   -   Add-On Releases - gXboxLive - Xbox Live Leaderboard (https://vborg.vbsupport.ru/showthread.php?t=243493)

TheSupportForum 09-16-2012 07:03 AM

Quote:

Originally Posted by JAnders (Post 2365580)
so I broke down and created my own custom code to add to the postbit_legacy template so it would display the gamertag.

with the below code it will show the gamertag name and a thumb of the avatar if you hoover on each it will show the actual image and if you click on the gt it will take you to the compose message screen on xbox.live.com

Code:

        <!-- xbox live gt -->
<div>
        <vb:if condition="$post['field9']"><fieldset><legend>XBox LIVE Gamercard</legend>
<a href="http://avatar.xboxlive.com/avatar/{vb:raw post.field9}/avatar-body.png" target="_blank" onmouseover="gXBL_show('nxeavatar','{vb:raw post.field9}');" onmouseout="return gXBL_hide();"><img border="0" width="20" height="20" src="http://avatar.xboxlive.com/avatar/{vb:raw post.field9}/avatarpic-s.png" style="border: 1px solid gold;" /></a>
<a href="https://live.xbox.com/en-US/Messages?gamertag={vb:raw post.field9}" target="_blank" onmouseover="gXBL_show('gamercard','{vb:raw post.field9}');" onmouseout="return gXBL_hide();">{vb:raw post.field9}</a></vb:if>
</fieldset>
</div> 
          <!-- endxbox live gt -->

i usually place it right below the post.posts portion on the template. but you may want to play around and use it where you want.


if you're using the eTiKeT? 2011 Posbit_legacy - Postbit modification for the threads then use the code like this:


Code:

        <!-- xbox live gt -->
<div class="etiket_postbit_alanI_userinfo_extra_yazIlarI">
        <vb:if condition="$post['field9']"><fieldset><legend>XBox LIVE Gamercard</legend>
<a href="http://avatar.xboxlive.com/avatar/{vb:raw post.field9}/avatar-body.png" target="_blank" onmouseover="gXBL_show('nxeavatar','{vb:raw post.field9}');" onmouseout="return gXBL_hide();"><img border="0" width="20" height="20" src="http://avatar.xboxlive.com/avatar/{vb:raw post.field9}/avatarpic-s.png" style="border: 1px solid gold;" /></a>
<a href="https://live.xbox.com/en-US/Messages?gamertag={vb:raw post.field9}" target="_blank" onmouseover="gXBL_show('gamercard','{vb:raw post.field9}');" onmouseout="return gXBL_hide();">{vb:raw post.field9}</a></vb:if>
</fieldset>
</div> 
          <!-- endxbox live gt -->


you should post this information in that template modification post

JAnders 09-17-2012 01:44 PM

well I'm hoping it's not a permanent thing and the issue gets sorted ;)

Hippy 09-18-2012 10:05 PM

Quote:

Originally Posted by JAnders (Post 2366147)
well I'm hoping it's not a permanent thing and the issue gets sorted ;)

I worked on this for 6 hours


your game cards is working partially off the original code and the plugin I made...

weird..
I dont get this..
I will attack this again
when I clear my head

Hippy 09-18-2012 10:07 PM

Quote:

Originally Posted by thedarkroom (Post 2365836)
installed https://vborg.vbsupport.ru/showthread.php?t=247698 template, but when i activate the mod breaks the forum, can someone help me? vbulletin version 4.2 patch 2

might want to post over in that mods thread..

thedarkroom 09-25-2012 08:45 PM

sorry my mistake, how can i move the block of stadistics to below navbar?

Hippy 09-25-2012 09:25 PM

disable Forum Home Statistics in the options for the this mod and manualy add
Code:

{vb:raw gxblstats}
where you want it to display.

CAG CheechDogg 09-26-2012 10:26 AM

I regularly check back to see if a solution for the blank page has been found. Very weird how enabling it triggers the white blank page.

CAG CheechDogg 09-26-2012 10:27 AM

Hippy, did you ever find a solution for the Reputation still showing (0) all the time?

I might of stumbled into something Hippy.

I use the Post Thank You Hack and it uses the following:

Varname $vbphrase[post_thanks_total_thanks]
Text Total Thanks

I changed that to something else and it reflected on the xbox live leaderboards as well changing the phrase for Reputation to what I changed it for the Post Thank You Hack as well. Could there be something connected here? I mean it shouldn't except for the phrase being the same, but it seems it is using the Post Thank You Hack's "reputation" phrase right?

MegaManSec 09-26-2012 10:48 AM

XSS Vulnerability Found.

gxboxlive.php:199: $pagenav = construct_page_nav($pagenumber, $perpage, $gxblcounts['usercount'], 'gxboxlive.php?do=getall', (!empty($sortfield) ? "&sortfield=$sortfield" : "") . (!empty($sortorder) ? "&sortorder=$sortorder" : ""));


OP's last activity was 2011 December, so I'm assuming it won't be fixed.



To fix it yourself, find these lines in gxboxlive.php
Code:

        $sortfield = $vbulletin->input->clean_gpc('r', 'sortfield', TYPE_STR);
        $sortorder = $vbulletin->input->clean_gpc('r', 'sortorder', TYPE_STR);

and add under it
Code:

        $sortfield = htmlspecialchars($sortfield);
        $sortorder = htmlspecialchars($sortorder);


CAG CheechDogg 09-26-2012 11:14 AM

Quote:

Originally Posted by loaep (Post 2368654)
XSS Vulnerability Found.

gxboxlive.php:199: $pagenav = construct_page_nav($pagenumber, $perpage, $gxblcounts['usercount'], 'gxboxlive.php?do=getall', (!empty($sortfield) ? "&sortfield=$sortfield" : "") . (!empty($sortorder) ? "&sortorder=$sortorder" : ""));


OP's last activity was 2011 December, so I'm assuming it won't be fixed.



To fix it yourself, find these lines in gxboxlive.php
Code:

        $sortfield = $vbulletin->input->clean_gpc('r', 'sortfield', TYPE_STR);
        $sortorder = $vbulletin->input->clean_gpc('r', 'sortorder', TYPE_STR);

and add under it
Code:

        $sortfield = htmlspecialchars($sortfield);
        $sortorder = htmlspecialchars($sortorder);


I know about XSS Vulnerabilities but how high risk is this if we don't add that fix of yours


All times are GMT. The time now is 01:30 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01774 seconds
  • Memory Usage 1,752KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (7)bbcode_code_printable
  • (4)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (2)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete