[AJAX] vBShout v2.0

[high]Staff Edit/Update[/high]

I have released an updated version of this hack (version 2.0.1), this version fixes some security issues with this hack. All version prior to this one allow users to insert html in their shouts, this can cause problems with them using html that breaks the site layout or malicious javascript. Download the new zip file (vBshout_fixed.zip) and upload the new vbshout.php file to patch/upgrade. If you want to manual instructions they are in the zip file, in the file bugfixes.txt

Second Staff update

I've uploaded a new version of this hack, dubbed '2.0.2'. This one should fix the html injection issues without breaking special characters. To upgrade, download the new zip file and upload the new vbshout.php file.

Please note that this only fixes the html injection issues. I do not use this hack on my own forum (although I've tested this on a client's board) so I will not be fixing the server load issues. I suggest you do not install this hack if you can't deal with the extra server load, as it's rather intensive.

- Brad

[high]End staff edit[/high]

Well, been a while since I've been to vb.org and released anything, thought i'd break the trend and whip up something quick while I have a little spare time.

A shoutbox as you would assume, a very simple one to start off with, but does include AJAX Technology, which pushes the shoutbox 1 step closer to live, messages from other people will appear with no refreshing, and so will yours that you post

A preview is below, i'd estimate a 50 second installation max

Primary Features:
- AJAX Technology (no refreshing)
- Administration control an display element options
- Fast format editor

Change Log::

- v1.1:
WOL (Who's Online) Correction

- v1.2:
New Posting Featurs (Bold/Italic/Underline/Colour/Font)
Admin Controls

- Change location/position of shoutbox
- Change number of shouts displayed
- Switch vbcode/similes on/off

- v1.3
Firefox javascript issue fixed
New Admin Controls

- Command Activation
- Swtch extra format options on/off
- Change position of editor (above/below messages)

New Commands

- /prune (Clears the shoutbox completely)
- /prune [username] (Clears all shouts posted by specified user)

- v1.4
Usergroup HTML Markup For Usernames
Clear Editor Button
Emoticons Pop Up Menu
Time display configurated to vBulletin settings
Username Links To Profile
New Admin Conrols

New vBShout Position (Directly Above Forums)
Banned Users
Banned Usergroups
Banned Permissions
Smilie Pop-Up Box Height
Smilie Pop-Up Box Width

New Commands

"/me" - Action message (all users are able to use this command)
/pruneshout [shout] - Deletes a single shout

- v1.5
Improved Smilies Display
XHTML 1.0 Transitional Valid (couple of errors fixed)
New Admin Options

Shoutbox Height
Smilies To Show
Shout Messages Order
Banned Permissions (fixed)

- v1.6
Bug Fixes:

- Unable to delete shouts that used /me command fixed
- Shouts being displayed from bottom-upwards only showed first 20 shouts

Automatically parses URL's

- v2.0
New Archive

- Displays shouts and pages
- Stats and top 10 shouters
- AJAX Edit/Delete (staff can edit/delete all shouts)

Enjoy,

- Zero Tolerance

[jerx]

New Commands

- /prune (Clears the shoutbox completely)
- /prune [username] (Clears all shouts posted by specified user)

Don' t these commands delete the database?

[exegete]

Originally Posted by lucky64

Any chance of being able to control what vbcode can be used?

I don't want html, or img for example, but do want smilies..

Don't know whether this has been answered already, but I achieved it with the following...

In vbshout.php, find the function "bbcodeparser", and specifically the following code in that function:

        if ($vbulletin->options['shout_bbcode'])
        {
                return $vbulletin->vbshout_parse->parse(convert_url_to_bbcode($text), 'nonforum');
        }

Replace with:

        if ($vbulletin->options['shout_bbcode'])
        {
                $text = preg_replace('/\[\/?(img|size|quote|html|code|center|spoiler|anchor|link|blockquote)(=[^\]]*)?\]/', '', $text);
                return $vbulletin->vbshout_parse->parse(convert_url_to_bbcode($text), 'nonforum');
        }

As you can see, I've removed a whole bunch of BB codes - just add or remove the keywords as necessary. Brackets and options etc for the codes should be handled automatically by the regular expression.

Hope it's self-explanatory.

[Reece^B]

anyone got any ideas for me?
The index is now named shoutbox lol when a user is viewing it.

[hotwheels]

Yeah, how can we mass delete the database of shouts?

Jerx is correct, just type /prune in your shout box and hit the shout button.......It does a quick job of it.....

Yes, but it was fine before I upgraded.

If you go to vbadvanced.com and type in vbshout, you can read some of the article's on the cmps upgrade, and it isn't working right. Alot of the people using vbadvanced have removed that part of the hack from their site's and are strictly using vbshout in the forums only......i could be wrong, which i usually am, but i read and read till my eye's hurt and found people just removing the mod.

[sinizter]

one problem,i uploaded the vbulletin.php file to my forum root directory,but where do i put it?...in acp? in archive?....also, how come its loading forever,it hasnt syopped loading.

[hassi]

Hi,

i've installed vbshout yesterday and i feel quite comfortable with it but i have some questions remaining. Maybe someone can answer them.

1) Can i prevent users from linking external graphics in the shoutbox? I remarked they may not only use system smilies but also diverse pics from their onw websites etc.

2) Is it possible to prevent users from editing/deleting their own shouts? I think this question or a similiar one has been raised before.

Sorry for my english, i'm german

Thanks in advance
Hassi

[Reece^B]

Originally Posted by hotwheels

If you go to vbadvanced.com and type in vbshout, you can read some of the article's on the cmps upgrade, and it isn't working right. Alot of the people using vbadvanced have removed that part of the hack from their site's and are strictly using vbshout in the forums only......i could be wrong, which i usually am, but i read and read till my eye's hurt and found people just removing the mod.

Yeha, but my shoutbox isnt in the CMPS it's jsut in the forums. Does this still count?

[bashy]

Hi ZT

I have a javascript issue showing up on the FF java console, this is:

Error: [Exception... "Component returned failure code: 0x80040111 (NS_ERROR_NOT_AVAILABLE) [nsIXMLHttpRequest.status]"  nsresult: "0x80040111 (NS_ERROR_NOT_AVAILABLE)"  location: "JS frame :: http://www.bashys-place.com/forums/index.php? :: showShouts :: line 2584"  data: no]
Source File: http://www.bashys-place.com/forums/index.php?
Line: 2584

Please advise?

[Exitilus]

I've tried searching this thread for my answer. But not finding it. So if this has been asked... Sorry.

Basically I have two domains. forums.my-domain.com and gallery.my-domain.com

The Shoutbox works fine in forums but not gallery. I tried changing all instances of vbshout.php to point to the forums.my-domain.com but that doesn't work. What am I missing?

[hassi]

How to prevent certain usergroups from editing/deleting shouts:

Because some users were doing nothing else than deleting / editing shouts and some more who were just mod (but no team-member though) of their userforum were editing / deleting shouts of others i tried to figure out how to restrict access to edit / delete function for certain usergroups only. So if someone is interested in it, please feel free to use the following code.

go to your templates -> look for forumhome_vbshout_archive_shout -> find the following line:

<if condition="$bbuserinfo[userid] == $Shout[s_by] OR can_moderate()">

replace it with:

<if condition="in_array($bbuserinfo[usergroupid], array(x, x, x))">

the x's should be replaced by the usergroups who should have access to edit / delete function.

i hope my explanation is understandable (i'm german)

cu
hassi