vb.org Archive - Playing Flash and Media Files Inline

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 3.0 Full Releases (https://vborg.vbsupport.ru/forumdisplay.php?f=33)

- - Playing Flash and Media Files Inline (https://vborg.vbsupport.ru/showthread.php?t=78235)

Playing Flash and Media Files Inline

Is it possible? Is there any security issue? I am thinking of releasing this hack, but I am not sure about the demands and security issue on this.

History:

Originally, I have window media files played directly (inline) in phpbb. When I moved to vb, I tried to seek help from vb.com to modify their attachment system without success. I understand that Vb's attachment system for security purpose. Therefore, I have to find other means to achieve what I want. I come up with this hack when my board is at its infancy stage. It probably still is infancy because, it is used as a test and fun board when I am at work :D.

Requirement:

This hack might not work on all system due to different configuration, platform, and such. I will try to help you all as much as I can.

This hack will use your board attachment system to run mp3, wma, wmv, flash files. It is a bit server intensive. So be warned :D :D

Security Risk:

It has been known that flash files can be used to exploit and compromise certain securities on user computer. You might want to verify your flash attachment before enable flash playing inline on your forum.

Enut with the blah blah ?? :D

Open your functions_showthread.php

Find

PHP Code:


		
			
function construct_postbit($post, $maintemplatename = 'postbit', $alternate = '')

{

Add under

PHP Code:


		
			
// flash attachment

    global $flashid,$flashfilename,$flashextension,$flashfilenameandlocation,$flashfilesize;



// wma attachment

    global $wmaid,$wmafilename,$wmaextension,$wmafilenameandlocation,$wmafilesize;

    // wmv attachment

    global $wmvid,$wmvfilename,$wmvextension,$wmvfilenameandlocation,$wmvfilesize;    

    // mp3 attachment

    global $mp3id,$mp3filename,$mp3extension,$mp3filenameandlocation,$mp3filesize;

//default media tag

    $media_controller= "$vboptions[bburl]/attachment.php?attachmentid=";

Find

PHP Code:


		
			
$attachment['filename'] = fetch_censored_text(htmlspecialchars_uni($attachment['filename']));

            $attachment['attachmentextension'] = strtolower(file_extension($attachment['filename']));

            $attachment['filesize'] = vb_number_format($attachment['filesize'], 1, true);

Add Under

PHP Code:


		
			
//flash attachment

            $flashfilename=$attachment['filename'];                            

            $flashextension=$attachment['attachmentextension'];                            

            $flashfilesize=$attachment['filesize'];                            

            $flashid=$post['userid'];                            

            $flashfilenameandlocation=$media_controller . $attachmentid  ;

            //wma attachment

            $wmaid=$post['userid'];

            $wmafilename=$attachment['filename'];

            $wmaextension=$attachment['attachmentextension'];                                        

            $wmafilenameandlocation=$media_controller . $attachmentid  ;            

            $wmafilesize=$attachment['filesize'];            

            //wmv attachment

            $wmvid=$post['userid'];

            $wmvfilename=$attachment['filename'];

            $wmvextension=$attachment['attachmentextension'];                            

            $wmvfilenameandlocation=$media_controller . $attachmentid  ;            

            $wmvfilesize=$attachment['filesize'];            

            //wmv attachment

            $mp3id=$post['userid'];

            $mp3filename=$attachment['filename'];

            $mp3extension=$attachment['attachmentextension'];

            $mp3filenameandlocation=$media_controller . $attachmentid  ;

            $mp3filesize=$attachment['filesize'];

Find

PHP Code:


		
			


eval('$post[\'imageattachmentlinks\'] .= "' . fetch_template('postbit_attachment') . '";');

                            $show['imageattachmentlink'] = true;

                        }

                        break;

Add Under

PHP Code:


		
			


case 'swf':

                        eval('$post[\'flashattachments\'] .= "' . fetch_template('postbit_attachmentflash') . '";');                        

                        $show['flashattachment'] = true;                        

                    break;    

                    

                    case 'wma':

                        eval('$post[\'wmaattachments\'] .= "' . fetch_template('postbit_attachmentwma') . '";');                        

                        $show['wmaattachment'] = true;                        

                    break;    

                    

                    case 'wmv':

                        eval('$post[\'wmvattachments\'] .= "' . fetch_template('postbit_attachmentwmv') . '";');                        

                        $show['wmvattachment'] = true;                        

                    break;    

                    

                    case 'mp3':

                        eval('$post[\'mp3attachments\'] .= "' . fetch_template('postbit_attachmentmp3') . '";');                        

                        $show['mp3attachment'] = true;                        

                    break;

GLOBAL Phrases:

Var: attach_wmv
Text: Window Media Video

Var: attach_mp3
Text: MPEG-1 layer 3 Audio Encoding :

Var: attached_flash
Text: Attached Flash File:

Var :attach_wma
Text : Window Media Audio :

Templates:

Go to your Postbit template

Find

Code:

                                        $post[imageattachments]

                                        </div>

                                </fieldset>

                        </if>

Add Under

Code:



<if condition="$show[flashattachment]">

<fieldset class="fieldset">

<legend>$vbphrase[attached_flash] $flashfilename </legend>



<div style="padding:$stylevar[formspacer]px">

$post[flashattachments]

</div>

</fieldset>



</if>







<if condition="$show[wmaattachment]">

<fieldset class="fieldset">

<legend>$vbphrase[attach_wma] $wmafilename</legend>



<div style="padding:$stylevar[formspacer]px">

$post[wmaattachments]

</div>

</fieldset>



</if>



<if condition="$show[wmvattachment]">

<fieldset class="fieldset">

<legend>$vbphrase[attach_wmv] $wmvfilename</legend>



<div style="padding:$stylevar[formspacer]px">

$post[wmvattachments]







</div>

</fieldset>



</if>

        

<if condition="$show[mp3attachment]">

<fieldset class="fieldset">

<legend>



$vbphrase[attach_mp3] $mp3filename</legend>



<div style="padding:$stylevar[formspacer]px">

$post[mp3attachments]



</div>

</fieldset>



</if>

Go to your board admin and add the templates under postbits.

The included templates file uses the existing templates on my board. Feel free to modified.

If you need help drop a line here or at www.aotrangmongmo.com

bad forum, read the upper ones, you'll find the Modification Requests forum...

I know this is not the forum for it, but I want to see if the hack is demanded. :D :D

I think your best way to judge demand is to place your hack in beta.

Fine for me,waiting for your release....thanks.

what do u mean by Playing Flash and Media Files Inline ??

Quote:

Originally Posted by Amavisca

what do u mean by Playing Flash and Media Files Inline ??

When you attach window media files, real media, wmv, flash in vb, most likely they are not played within your posts. They will be in attachment for download.

that would be like streaming the media right?

it would be great i think...

You can do it pretty easy with bbcode

while i'm not sure about media files, flash files are a huge secruity risk i would suggest you note that in your initial post

can i make it avelable to any usergroups i want?
it well be great :)
thx alot

i dont get whats the difference from using just bbcodes for both instead of hacking the files

Nice hack, wrong forum.

Show thread modifications would be more appropriate.

Hi..
It looks like a nice hack IF it will allow you to play ONLY media files (different formats: mp3, wav, wmv, au, rm, mov..etc.) because it is well known and tried before the security risk arising from playing flash files stored on your domain.. unless we can find a solution like to be able to store attachments on a different domain -or sub domain- and then try to call it from VB..
I am not a coder.. but I thaught 'll share my idea..

Quote:

Originally Posted by montda

can i make it avelable to any usergroups i want?
it well be great :)
thx alot

This hack uses attachment system on vb. You can set the permission there.

Quote:

Originally Posted by Mla7a6

Flash files are cached to member's computer. If you don't want flash files being played on your board, then disable that section.

Quote:

Originally Posted by Johnny

i dont get whats the difference from using just bbcodes for both instead of hacking the files

With bbcode:

You have to upload the files on your forum thru certain means like ftp, or the like.

Then you have to use bbcode for the link

With this one:

You use the vb built in attachment system.

Quote:

Originally Posted by stitch

you dont have to upload the files threw ftp to use the bbcode for a video or flash file you can just upload it threw the attachment system and link the attachment in the bbcode. i know it works that way on my board. :ermm:

Quote:

Originally Posted by Johnny

Does every member have access to your ftp?

Quote:

Originally Posted by stitch

Does every member have access to your ftp?

I think he already explained that. He is using the vbulletin attachment system.

hi, i have a problem!
with upload comes the error:

Quote:

Ungueltige SQL-Abfrage:
INSERT INTO attachment
(userid, dateline, filename, filedata, filesize, visible, filehash, posthash, thumbnail, thumbnail_dateline, thumbnail_filesize)
VALUES
(1, 1111344033, 'bomb.wmv',
'0&?u?f???\0?\0b?l: \0\0\0\0\0\0\0\0\03&?u?f???\0?\0b?lF\0\0\0\0\0 \0\0\0\0\0\0\0\0\0f\0u\0n\0-\0v\0i\0d\0e\0o\0.\0n\0e\0t\0\0\0\0\0\0\0\0\0?ܫ?G ????\0? Seh\0\0\0\0\0\0\0w^U,h?@??+0?\'B|?\0\0\0\0\00?x R????\0\0\0\0\0\0???\0\0\0\0 x\0\0\0\0?\0\0\0\0\0\0\0\0\0?\0\0?\0\0B?\0? ?_.????\0? Se?\0\0\0\0\0\0?ӫ?????\0? Se\0?\0\0?FC|???K?)9>?A\\?!\0\0\0\0\0\0\0\0d\0 e\0\0\0]??&?E?G?_eR?\Z\0\0\0\0\0\0\0???ů[wH?g??D?Lʌ\0\0\0\0\0\0\0\0\0\0 \0\0\0\0\0I\0s\0V\0B\0R\0\0\0\0\0\0\0\04\0\0\0 \0\0\0D\0e\0v\0i\0c\0e\0C\0o\0n\0f\0o\0r\0m\0a\0n\ 0c\0e\0T\0e\0m\0p\0l\0a\0t\0e\0\0\0L\02\0\0\0\0\0 \0 \0\0\0\0\0I\0s\0V\0B\0R\0\0\0\0\0\0\0\04\0\0\0 \0\0\0D\0e\0v\0i\0c\0e\0C\0o\0n\0f\0o\0r\0m\0a\0n\ 0c\0e\0T\0e\0m\0p\0l\0a\0t\0e\0\0\0@\0\0\0\0\0\0. \0\0\0\0\0W\0M\0/\0W\0M\0A\0D\0R\0C\0P\0e\0a\0k\0R\0e\0f\0e\0r\0e\0 n\0c\0e\0\0\0\Z7\0\0\0\0\04\0\0\0\0\0W\0M\0/\0W\0M\0A\0D\0R\0C\0A\0v\0e\0r\0a\0g\0e\0R\0e\0f\0 e\0r\0e\0n\0c\0e\0\0\0?\n\0\0\0\0\0\0\0\0\0\0N \0u\0m\0b\0e\0r\0O\0f\0F\0r??

mysql error: Got a packet bigger than 'max_allowed_packet'

mysql error number: 1153

I think you have a server restriction on allowable upload filesize. I think the standard is 2MB. You should ask your host to increase the upload filesize.

my php.ini

upload_max_filesize = 5M

and the file is 3 mb

This is not a php error, but a mysql error.

Check your mysql configuration file for 'max_allowed_packet'.

max_allowed_packet = 1M

No comment LOL :nervous:

Ok is good :)

a 1 problem .....

i push play and nothing happens :ermm:

http://www.your-topic.de/vbulletin/s...3&page=2&pp=10

For some reason your $vboptions[bburl] doesn't display your forum path.

Replace this

PHP Code:


		
			
//default media tag 

    $media_controller= "$vboptions[bburl]/attachment.php?attachmentid=";

with this

PHP Code:


		
			
//default media tag 

    $media_controller= "http://www.your-topic.de/vbulletin/attachment.php?attachmentid=";

Big THX :)

must that automatically or can be that manually???

On my board $vboptions[bburl] is automatically filled, but on your board it is not. So you will have to do it manually.

I am a little confused about the last part....

are you saying to created templates for each section?
or including each file type into the postbit template?

I installed this hack but when I upload a swf attachment nothing happens.

works not by me. I had installed the hack, but the forum displaying 'blank' attachments.

can you examine your hack?

Quote:

Originally Posted by JohnBee

Hi John You will have to create new templates for each media. I have inclued them in the attached files

Quote:

Originally Posted by mmdmk

works not by me. I had installed the hack, but the forum displaying 'blank' attachments.

can you examine your hack?

mmdmk and DjJoschimo

Is it possible for me to take a look at an example link?

Thanks

This might solve some issues, or maybe not... I noticed in your hack that you make reference to "'postbit_attachmentflash". I looked in my postbit templates, and couldn't find one called 'postbit_attachmentflash', but did find one called 'postbit_attachmentswf'. I changed the code to refernce that template instead, and then it worked!

Now, that being said, I have one more question. You think we could alter it somehow to diplay in the correct height/width? Perhaps if you set the height/width in the name of the file somehow (ie 125x300.swf) and then extract that height/ width and display as part of the postbit_attachmentswf template? Dunno... I'm not that familar with PHP, so this is jsut a guess...

In case anyone is interested, I figured out a way to do the above working off of the really great code above-- just for flash though. I'm just going to go ahead and post all the code I found to work for me. I'm not a PHP queen, so some of this is guessed-- feel free to make suggestions on the messiness. Follow the placement instructions as above.

When in place, you should be able to attach any swf and have it embedded at the correct width X height as long as the file begins with the format w_h.swf or wxh.swf or wXh.swf. i.e., something like this:

120_300_myfile.swf
130x400.swf
140X500_thisRocks.swf

**** VERY SERIOUS SECURITY RISKS HERE. REALLY. SERIOSLY. IF you don't care if someone uses this to hack your board and blow it up, then you can use it. heh heh.

Here's the code.

functions_showthread.php:

find

PHP Code:


		
			
function construct_postbit($post, $maintemplatename = 'postbit', $alternate = '') 

{

Add under

PHP Code:


		
			
// flash attachment hack

global $flashid,$flashfilename,$flashextension,$flashfilenameandlocation,$flashfilesize,$flashfiledimen,$flashheight,$flashwidth;

Find

PHP Code:


		
			
$attachment['filename'] = fetch_censored_text(htmlspecialchars_uni($attachment['filename'])); 

            $attachment['attachmentextension'] = strtolower(file_extension($attachment['filename'])); 

            $attachment['filesize'] = vb_number_format($attachment['filesize'], 1, true);

Add under:

PHP Code:


		
			
//flash attachment hack

$flashid=$post['userid'];   

$flashfilename=$attachment['filename']; 

$flashextension=$attachment['attachmentextension'];   

$flashfilesize=$attachment['filesize'];  

$flashfiledimen=$attachment['filename'];  

list($flashwidth, $flashheight) = split('[_xX.]',$flashfiledimen);                                             

$flashfilenameandlocation=$media_controller . $attachmentid  ;

Find

PHP Code:


		
			
eval('$post[\'imageattachmentlinks\'] .= "' . fetch_template('postbit_attachment') . '";'); 

                            $show['imageattachmentlink'] = true; 

                        } 

                        break;

Add under:

PHP Code:


		
			
//flash attachment hack

case 'swf': 

eval('$post[\'flashattachments\'] .= "' . fetch_template('postbit_attachmentswf') . '";');                         

$show['flashattachment'] = true;                         

break;

GLOBAL Phrases:

Var: attached_flash
Text: Attached Flash File:

Templates:

Go to your Postbit template (edit templates)

Find

Code:

        $post[imageattachments]

                                        </div>

                                </fieldset>

                        </if>

Add under

Code:

<if condition="$show[flashattachment]">

<fieldset class="fieldset">

<legend>$vbphrase[attached_flash] $flashfilename </legend>



<div style="padding:$stylevar[formspacer]px">

$post[flashattachments]

</div>

</fieldset>



</if>

Finally, also under postbit_templates you should have something called postbit_attachmentswf. IF you don't have it, create it with this code:

Code:

<br>

<smallfont>

Attachment Reference: = $attachmentid<br>

(Post Reference: = $post[postid])<br>

<embed src="attachment.php?attachmentid=$attachmentid" width="$flashwidth" height="$flashheight" type=application/x-shockwave-flash></embed><br><br>

</smallfont>

Stitch, I have decided to take some time and work with this, it's a great mod and I have it tweaked they way I need it. The only thing prevent me from putting into production is the fact that it preloads the file (wmv or mp3) and that is a killer when you have an attachment in ever post on the page.

I set it not to autoplay but I need a paramater of some kind that prevents it from preloading until the play button is pushed.

Quote:

Originally Posted by ericgtr

Hi Eric

I think the preloading or buffering is set locally under window media setup. I don't think we can control it though

so is this safe to use then? which forums have it? just so i can check em out before installing!

this is a great idea btw.

Phrase Groups Available:

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01425 seconds Memory Usage 1,918KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (5)bbcode_code_printable (14)bbcode_php_printable (11)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (2)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (40)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: