[AJAX] vBShout v2.0

[high]Staff Edit/Update[/high]

I have released an updated version of this hack (version 2.0.1), this version fixes some security issues with this hack. All version prior to this one allow users to insert html in their shouts, this can cause problems with them using html that breaks the site layout or malicious javascript. Download the new zip file (vBshout_fixed.zip) and upload the new vbshout.php file to patch/upgrade. If you want to manual instructions they are in the zip file, in the file bugfixes.txt

Second Staff update

I've uploaded a new version of this hack, dubbed '2.0.2'. This one should fix the html injection issues without breaking special characters. To upgrade, download the new zip file and upload the new vbshout.php file.

Please note that this only fixes the html injection issues. I do not use this hack on my own forum (although I've tested this on a client's board) so I will not be fixing the server load issues. I suggest you do not install this hack if you can't deal with the extra server load, as it's rather intensive.

- Brad

[high]End staff edit[/high]

Well, been a while since I've been to vb.org and released anything, thought i'd break the trend and whip up something quick while I have a little spare time.

A shoutbox as you would assume, a very simple one to start off with, but does include AJAX Technology, which pushes the shoutbox 1 step closer to live, messages from other people will appear with no refreshing, and so will yours that you post

A preview is below, i'd estimate a 50 second installation max

Primary Features:
- AJAX Technology (no refreshing)
- Administration control an display element options
- Fast format editor

Change Log::

- v1.1:
WOL (Who's Online) Correction

- v1.2:
New Posting Featurs (Bold/Italic/Underline/Colour/Font)
Admin Controls

- Change location/position of shoutbox
- Change number of shouts displayed
- Switch vbcode/similes on/off

- v1.3
Firefox javascript issue fixed
New Admin Controls

- Command Activation
- Swtch extra format options on/off
- Change position of editor (above/below messages)

New Commands

- /prune (Clears the shoutbox completely)
- /prune [username] (Clears all shouts posted by specified user)

- v1.4
Usergroup HTML Markup For Usernames
Clear Editor Button
Emoticons Pop Up Menu
Time display configurated to vBulletin settings
Username Links To Profile
New Admin Conrols

New vBShout Position (Directly Above Forums)
Banned Users
Banned Usergroups
Banned Permissions
Smilie Pop-Up Box Height
Smilie Pop-Up Box Width

New Commands

"/me" - Action message (all users are able to use this command)
/pruneshout [shout] - Deletes a single shout

- v1.5
Improved Smilies Display
XHTML 1.0 Transitional Valid (couple of errors fixed)
New Admin Options

Shoutbox Height
Smilies To Show
Shout Messages Order
Banned Permissions (fixed)

- v1.6
Bug Fixes:

- Unable to delete shouts that used /me command fixed
- Shouts being displayed from bottom-upwards only showed first 20 shouts

Automatically parses URL's

- v2.0
New Archive

- Displays shouts and pages
- Stats and top 10 shouters
- AJAX Edit/Delete (staff can edit/delete all shouts)

Enjoy,

- Zero Tolerance

[Mikecp421]

Originally Posted by Mikecp421

get this when i try to uninstall

Database error in vBulletin 3.5.3:

Invalid SQL:
drop table `shout`;

MySQL Error : Unknown table 'shout'
Error Number : 1051
Date : Thursday, April 20th 2006 @ 06:32:25 PM
Script : http://www.meogee.com/admincp/plugin.php
Referrer : http://www.meogee.com/admincp/plugin...id=_vbshout&s=
IP Address :
Username : Mikecp421
Classname : vb_database


tried to overwrite the shout by installing this one over it and now I get an error in the forum

anybody??

[Mikecp421]

also get this in the shoutbox itself

Database error in vBulletin 3.5.3:

Invalid SQL:

select s.*, u.username, u.usergroupid from shout s
left join user u on (u.userid = s.s_by)
order by s.sid desc limit 20;

MySQL Error : Table 'meogeec_forumnew.shout' doesn't exist
Error Number : 1146
Date : Friday, April 21st 2006 @ 09:16:09 AM
Script : http://www.meogee.com/vbshout.php
Referrer :
IP Address :
Username : Mikecp421
Classname : vb_database

[Zachery]

Originally Posted by thisgeek

Why are you using htmlspecialchars() as the 'fix' function? That only causes special chars to get converted... why not use strip_tags() ?

I've replaced the two calls to htmlspecialchars with strip_tags and everything is working as it is supposed to. - html code is stripped out, while leaving special chars alone.

Anyway, thanks for doing it in the first place!

Thats what happens in a normal post

Mike, you just uploaded the new file and it is causing the problem?

[Mikecp421]

actually the first error message is the error I got when I tried to uninstall via the Product manager in the ACP the second (which shows in the shoutbox itself) is what I got when I manually replaced both files. I uploaded the xml and then imported it via the product manager allowing an overwrite and I replaced the php file int he ftp.

[Zachery]

All you needed was to upload the new file, nothing else.

The error was from after you uninstalled the hack.

[blacklancer]

just installed the new file....is there a way to allow certain characters???

i tried to type 3" k&n filter and it came out 3" k&n filter.....

[DJ XtAzY]

Originally Posted by hassi

If you want to have a timestamp in the shoutbox which is different to the rest of the forum i.e. just the time and not the date then open your vbshout.php and delete the following:

        $Time  = vbdate($vbulletin->options['dateformat'], $time, $vbulletin->options['yestoday']);
    $Time .= ' ';

Hope someone might find it useful. You'll find an example how it looks after modification in the attachement. It also works in vbadvanced if you have it installed in there.

Hassi

does anyone know how to remove the brackets when it shows the time. I want to remove the time and the bracket from the shoutbox

[Mikecp421]

Originally Posted by Zachery

All you needed was to upload the new file, nothing else.

The error was from after you uninstalled the hack.

The original error was from trying to uninstall the hack as the upgrade instructions instructed me to do. So what do I do now?

[Mikecp421]

this is the upgrade instructions;

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~
Step 1:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~
Upload 'vbshout.php' to your 'FORUMS ROOT DIRECTORY' (ie: forums/ or forum/)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~
Step 2:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~
Go to your ACP, then:
Plugin System -> Manage Products -> vBShout -> Uninstall
Plugin System -> Manage Products -> [Add/Import Product]
Make sure "Allow Overwrite" is set to 'Yes'!
Select 'vbshout.xml' from your computer and then press 'Import'

Upgrade is now complete, enjoy.

note the bolded field, thats where it all went wrong

[Gizmo5h1t3]

this still isnt working...followed the instructions to the letter, and im getting this :

[1 Minute Ago 18:13] Gizmo: testing quote marks "bollox"