[AJAX] vBShout v2.0

[high]Staff Edit/Update[/high]

I have released an updated version of this hack (version 2.0.1), this version fixes some security issues with this hack. All version prior to this one allow users to insert html in their shouts, this can cause problems with them using html that breaks the site layout or malicious javascript. Download the new zip file (vBshout_fixed.zip) and upload the new vbshout.php file to patch/upgrade. If you want to manual instructions they are in the zip file, in the file bugfixes.txt

Second Staff update

I've uploaded a new version of this hack, dubbed '2.0.2'. This one should fix the html injection issues without breaking special characters. To upgrade, download the new zip file and upload the new vbshout.php file.

Please note that this only fixes the html injection issues. I do not use this hack on my own forum (although I've tested this on a client's board) so I will not be fixing the server load issues. I suggest you do not install this hack if you can't deal with the extra server load, as it's rather intensive.

- Brad

[high]End staff edit[/high]

Well, been a while since I've been to vb.org and released anything, thought i'd break the trend and whip up something quick while I have a little spare time.

A shoutbox as you would assume, a very simple one to start off with, but does include AJAX Technology, which pushes the shoutbox 1 step closer to live, messages from other people will appear with no refreshing, and so will yours that you post

A preview is below, i'd estimate a 50 second installation max

Primary Features:
- AJAX Technology (no refreshing)
- Administration control an display element options
- Fast format editor

Change Log::

- v1.1:
WOL (Who's Online) Correction

- v1.2:
New Posting Featurs (Bold/Italic/Underline/Colour/Font)
Admin Controls

- Change location/position of shoutbox
- Change number of shouts displayed
- Switch vbcode/similes on/off

- v1.3
Firefox javascript issue fixed
New Admin Controls

- Command Activation
- Swtch extra format options on/off
- Change position of editor (above/below messages)

New Commands

- /prune (Clears the shoutbox completely)
- /prune [username] (Clears all shouts posted by specified user)

- v1.4
Usergroup HTML Markup For Usernames
Clear Editor Button
Emoticons Pop Up Menu
Time display configurated to vBulletin settings
Username Links To Profile
New Admin Conrols

New vBShout Position (Directly Above Forums)
Banned Users
Banned Usergroups
Banned Permissions
Smilie Pop-Up Box Height
Smilie Pop-Up Box Width

New Commands

"/me" - Action message (all users are able to use this command)
/pruneshout [shout] - Deletes a single shout

- v1.5
Improved Smilies Display
XHTML 1.0 Transitional Valid (couple of errors fixed)
New Admin Options

Shoutbox Height
Smilies To Show
Shout Messages Order
Banned Permissions (fixed)

- v1.6
Bug Fixes:

- Unable to delete shouts that used /me command fixed
- Shouts being displayed from bottom-upwards only showed first 20 shouts

Automatically parses URL's

- v2.0
New Archive

- Displays shouts and pages
- Stats and top 10 shouters
- AJAX Edit/Delete (staff can edit/delete all shouts)

Enjoy,

- Zero Tolerance

[Total666]

Originally Posted by Sir_Yaro

You did only second code modification but you forgot about first one - the most important...

fix it

Sorry but I do not understand , I did everything in post https://vborg.vbsupport.ru/showpost....postcount=1772

Did I miss something ?? Thanks .. A crayon answer is ok .. Total

[maroceve]

hey guys ..Everything works perfect but i can't get the smileys to work. ?

[Sir_Yaro]

Originally Posted by Total666

Sorry but I do not understand , I did everything in post https://vborg.vbsupport.ru/showpost....postcount=1772

Did I miss something ?? Thanks .. A crayon answer is ok .. Total

There were mistakes in a code. For some reasons vB doesn't display my code correctly. Some parts were missing. I've fixed that. Correct code is in a attachment in this post:
https://vborg.vbsupport.ru/showpost....postcount=1772

[H@K@N]

Does anybody see the possibility to disallow external Image linking within the Shoutbox ?

So only images from same Host, will be allowed, as for smilies for ex.

Have still some kiddies, which posting external images, which are stored on a Server/Folder which have .htaccess with AUTH activated, so always the authentication Popup is coming up on my Forum. Some will Enter his Username and Password, i'm sure.

th@nks

[Sir_Yaro]

Originally Posted by H@K@N

Does anybody see the possibility to disallow external Image linking within the Shoutbox ?

So only images from same Host, will be allowed, as for smilies for ex.

Have still some kiddies, which posting external images, which are stored on a Server/Folder which have .htaccess with AUTH activated, so always the authentication Popup is coming up on my Forum. Some will Enter his Username and Password, i'm sure.

th@nks

this should do:

//unallowed extensions
if (strpos($Shout['s_shout'],"gif")|strpos($Shout['s_shout'],"jpg")|strpos($Shout['s_shout'],"bmp"))
{
//allowed domain
$allow="http://forum.ubuntu.pl";

if (strpos($Shout['s_shout'],$allow)!=0)
    {
    $Shout['s_shout'] = str_replace("http://","", $Shout['s_shout']);
    $Shout['s_shout'] = str_replace("www.","", $Shout['s_shout']);
    }
}

please, don't ask "where?". I dont know :P Check my last posts about word wrap in this topic and add this code in a same place (and let us know where is it)

[louis_chypher]

Originally Posted by blacklancer

i did this, but took it a step futher and only allowed 2 user id's access, one of whom was me. however, when i try to access it, it tells me that i dont have access.

After some looking into this I found that I also was not allowed access after a few times of clicking on the Shoutbox link.

I've placed My correction below with an addition:

//use for individual access
//if ($vbulletin->userinfo['userid'] != X)
//use for usergroup access
if (!(in_array($vbulletin->userinfo['usergroupid'], array(6,7))))
{ print_no_permission();
exit();
}

If you want to give access to only an individual then change
//if ($vbulletin->userinfo['userid'] != X)
to
if ($vbulletin->userinfo['userid'] != X)

and add change if (!(in_array($vbulletin->userinfo['usergroupid'], array(6,7))))
to
//if (!(in_array($vbulletin->userinfo['usergroupid'], array(6,7))))

Then replace the X with the userid of the person you are giving shoutbox edit access.

[S`ke]

My shoutbox can't show icon? How to fix? Who can help me?

[blacklancer]

Originally Posted by louis_chypher

After some looking into this I found that I also was not allowed access after a few times of clicking on the Shoutbox link.

I've placed My correction below with an addition:

//use for individual access
//if ($vbulletin->userinfo['userid'] != X)
//use for usergroup access
if (!(in_array($vbulletin->userinfo['usergroupid'], array(6,7))))
{ print_no_permission();
exit();
}

If you want to give access to only an individual then change
//if ($vbulletin->userinfo['userid'] != X)
to
if ($vbulletin->userinfo['userid'] != X)

and add change if (!(in_array($vbulletin->userinfo['usergroupid'], array(6,7))))
to
//if (!(in_array($vbulletin->userinfo['usergroupid'], array(6,7))))

Then replace the X with the userid of the person you are giving shoutbox edit access.

awesome! thanks for your help.

if i want multiple user ids, do i seperate by comma??

if ($vbulletin->userinfo['userid'] != 1,2,3)

[buzzel]

i love it... thanks for sharing!

questions:

-who can i change the backgroundcolor of the input box?

-and how do you managed the shouts... never delete or delete at 1 week or so?

-change the smilies from random to the first in row (1-10)

thanks

[aladinliverpool]

yeah we could do with something like that. ive had to go into the database to delete the shouts every so often.