View Single Post
  #1  
Old 07-30-2006, 08:52 PM
cheesegrits's Avatar
cheesegrits cheesegrits is offline
 
Join Date: May 2006
Posts: 500
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Rendering vboptions in posts

A twofer ...

1) Is there any existing bbcode addition or other mod which would let me display the current setting for a vB option in a post?

In other words, say I have a sticky post with instructions like "You may attach up to 5 files in any single post." Only instead of 5, I want it to show whatever $vbulletin->options['attachlimit'] is currently set to. This obviously means I don't have to go back and change my instruction posts any time I change 'attachlimit' (or whatever).

A seemingly small thing, but when I look at my site as a whole, and the amount of places I'm refering to vB options in instructions, announcements, etc., it would actually be a very useful feature.

2) If there isn't an existing bbcode mod for this, I'll probably write one. Which raises the second part of my question, which is: can anyone think of any security issues, obvious or obscure, with providing this feature?

I would obviously create usergroup based permissions for the new vboption tag, and use that to restrict usage to just Admins and maybe Super Mods. But I'm still interested in any potential malicous or unintentional security issues anyone can think of, for which I could throw in some defensive coding to protect against.

For instance, one thing I'd probably do is have a configurable list of vB options which the vboption tag would refuse to render, with an optional value / message to use instead:

supersecretoption;"Sorry, this option is Ultra Double Super Secret!"

Anyway, TIA for any thoughts, opinions or good light bulb jokes.

-- hugh
Reply With Quote
 
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01664 seconds
  • Memory Usage 1,763KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD_SHOWPOST
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_box
  • (1)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (1)post_thanks_postbit_info
  • (1)postbit
  • (1)postbit_onlinestatus
  • (1)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • reputationlevel
  • showthread
Included Files:
  • ./showpost.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showpost_start
  • bbcode_fetch_tags
  • bbcode_create
  • postbit_factory
  • showpost_post
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • showpost_complete