Really really thanks Pit!!!
You looks like the creator of V3Article!!
Thanks again!

The bug/problem is the same for all permission tests in arcade.php - he uses a NOT ("!") and "&" test - but does not enclose the test in brackets - for example ;

if (!$permissions['articlepermissions'] & CANFEATURE)

which should be

if (!($permissions['articlepermissions'] & CANFEATURE))

to work properly (anyone can make an article featured atm).

I just spent an hour or so fixing all these permission holes

:tired:

Yeah Paul, I noticed that most of them are like if (!$permissions['articlepermissions'] & CANFEATURE)

There are a few in there that are right though, hopefully he will release a new version soon. :)

OK for all those who answered my question (or tried to) No you cannot simply insert the Adsense code into the article because:

#1 It's Javascript, so for obvious reasons you don't want users able to submit JavaScript in the article body.

#2 It would also take some HTML tweaking that not all users would be familiar with trying to get the articles to show where they want them.

Soooo...

Since revenue sharing (IMO) will become the new "it" thing for webmasters I decided to allow my members to make money off of articles they write for my site.

See an example of how the articles look here

Basically what I've done is modified v3articles to insert members' Google Adsense ID into the google code displayed along with their article. Whenever a user writes an article their Adsense ID (an optional custom profile field) is inserted along with their channel ID in case they want to track the performance of their adds on my site. I don't do the 50/50 thing. They make ALL of teh money generated by clicks from their article. I make money with ads on other parts of the site and my own articles.

So what do you think?

Suggestion: Will someone please recompile this download with the bug fixes in place?
I'd do it but I'm busy securing other parts of my site as well.

Oh yeah and I'm wondering why I never got an email alert from the AUTHOR notifying me of such a huge vulnerablity?

Because of all the bugs that are suddenly popping up I'm thinking of recoding this thing from the ground up using the code for snippets only.

How do I remove this last part from the vBulletin Options page in the Admin CP after uninstallation;

http://www.floridastreetscene.com/up...zeno/trace.gif

It's all the way in the bottom.

Thanks.

well why don't you just edit it like the instrucstion ? isn't it very simple ?

I don't think John knows this already, if yes he should have given a official fix.

or maybe we should email him.

Will thos work on 3.0.3?

Yes, I am using it with 303 :)

thanks pingme :)
any side notes? fixes i would need for it?