[NovoCiv]

Sorry for the delayed response. I've been away on personal business. Unfortunately the development administrator has not looked into this yet (I'm nowhere near as proficient as him, I focus more on running the site and PR type stuff).

I still feel completely lost on allowing blankposting. I looked into BBEdit and it looks to be mac only. I'm on a PC, are there any alternatives?

Originally Posted by Retal

Apart from using an editor or IDE as Lynne is suggesting you're preparing a hell of work and mistakes for yourself when you want to upgrade vBulletin.

Instead of editing the files directly find the hook nearest to the place you want to do damage and use it to create a plugin (= a PHP code that's run on the hook line).

I don't really understand any of your post. I have already changed around so much in my files that I don't intend to upgrade vBulletin. Upgrading would no doubt break a lot of things that we've done.


Edit: One more slight issue we've run into. For certain things (such as hide tags and QR images) we have noticed that hidden content can be found by quoting a post. I've narrowed it down to the newpost_quote template, and in styles where I remove the {vb:raw pagetext} from the template the vulnerability is removed (at the cost of quoting). I think the best solution would just be to add some command in the code to parse all BB code. I just don't know enough PHP to know what command to use. Here's an example of what I mean (I know parsebbcode() isn't real).

ORIGINAL:
[QUOTE={vb:raw originalposter}]{vb:raw pagetext}[/QUOTE]
FIX:
[QUOTE={vb:raw originalposter}]parsebbcode({vb:raw pagetext})[/QUOTE]