[AJAX] vBShout v2.0

[high]Staff Edit/Update[/high]

I have released an updated version of this hack (version 2.0.1), this version fixes some security issues with this hack. All version prior to this one allow users to insert html in their shouts, this can cause problems with them using html that breaks the site layout or malicious javascript. Download the new zip file (vBshout_fixed.zip) and upload the new vbshout.php file to patch/upgrade. If you want to manual instructions they are in the zip file, in the file bugfixes.txt

Second Staff update

I've uploaded a new version of this hack, dubbed '2.0.2'. This one should fix the html injection issues without breaking special characters. To upgrade, download the new zip file and upload the new vbshout.php file.

Please note that this only fixes the html injection issues. I do not use this hack on my own forum (although I've tested this on a client's board) so I will not be fixing the server load issues. I suggest you do not install this hack if you can't deal with the extra server load, as it's rather intensive.

- Brad

[high]End staff edit[/high]

Well, been a while since I've been to vb.org and released anything, thought i'd break the trend and whip up something quick while I have a little spare time.

A shoutbox as you would assume, a very simple one to start off with, but does include AJAX Technology, which pushes the shoutbox 1 step closer to live, messages from other people will appear with no refreshing, and so will yours that you post

A preview is below, i'd estimate a 50 second installation max

Primary Features:
- AJAX Technology (no refreshing)
- Administration control an display element options
- Fast format editor

Change Log::

- v1.1:
WOL (Who's Online) Correction

- v1.2:
New Posting Featurs (Bold/Italic/Underline/Colour/Font)
Admin Controls

- Change location/position of shoutbox
- Change number of shouts displayed
- Switch vbcode/similes on/off

- v1.3
Firefox javascript issue fixed
New Admin Controls

- Command Activation
- Swtch extra format options on/off
- Change position of editor (above/below messages)

New Commands

- /prune (Clears the shoutbox completely)
- /prune [username] (Clears all shouts posted by specified user)

- v1.4
Usergroup HTML Markup For Usernames
Clear Editor Button
Emoticons Pop Up Menu
Time display configurated to vBulletin settings
Username Links To Profile
New Admin Conrols

New vBShout Position (Directly Above Forums)
Banned Users
Banned Usergroups
Banned Permissions
Smilie Pop-Up Box Height
Smilie Pop-Up Box Width

New Commands

"/me" - Action message (all users are able to use this command)
/pruneshout [shout] - Deletes a single shout

- v1.5
Improved Smilies Display
XHTML 1.0 Transitional Valid (couple of errors fixed)
New Admin Options

Shoutbox Height
Smilies To Show
Shout Messages Order
Banned Permissions (fixed)

- v1.6
Bug Fixes:

- Unable to delete shouts that used /me command fixed
- Shouts being displayed from bottom-upwards only showed first 20 shouts

Automatically parses URL's

- v2.0
New Archive

- Displays shouts and pages
- Stats and top 10 shouters
- AJAX Edit/Delete (staff can edit/delete all shouts)

Enjoy,

- Zero Tolerance

[deezelpope]

Originally Posted by Black Tiger

And then there is the problem with the length of the shoutwindow growing and growing. But it can be that this is a problem related to the hack to setup vbshout in VBAdvanced.

:up:
/prune

[deezelpope]

Ininstalled and upgraded to 2.1!:up:

[Shazz]

Originally Posted by deezelpope

https://vborg.vbsupport.ru/showpost....postcount=1799

That fixes the quotation marks but not the other symbols. I typed &%*<>, and they came out looking like this... &amp;%*&lt;&gt;

And no, Shazz and GoNz00, the answer is NOT in here, cuz I've searched. And if you think it is, PROVE it and SHOW it to me.

Well you found it on vBCoderz I see

[princeedward]

clicked and installed....thanks for this....works fine on my vB3.6.5...

just wonder...if it's possible or how to add that smilies popups windows anywhere...or above that extra smilies window above... i mean "emoticons" window bar...so members can really choose and just click smilies to add...same as when we make new post and on the right side of that posting page...we can select smilies and underneath there's an option to click that "More"when we need other kind of smilies and that smilies popup window will appear...

please view attachment below...

thanks and best regards to all...

[deezelpope]

I tried them both...finally gave up...found 2.1 at vbHackers, after searching through numerous threads for hours, uninstalled 2.0, installed 2.1. Which I should've done in the first place, but I didn't wanna give up the timestamp...then I found the fix. Happy now.

EDIT: Just found your thread @ vbCoderz...got some questions there I hope you can help me with, Shazz...

[Black Tiger]

/prune

What do you mean with /prune?
I just de-installed the add-on hack and put everything back to original. Problem is still there. Some users can use the shout, and others put in text, click on the shout button and nothing happens.

They have java installed, several browsers tested, nothing.

A 2.1 version on vbhackers is newer then a v3 fixed version here on vborg?
Same I did not get my question answered at vbhackers either. So I'm still not happy.

[deezelpope]

I apologize...I must've misunderstood you. I just un-installed 2.0, and installed 2.1...I like it. But I'm with you on the support issue. Shazz (vbCoderz) has given me more support than the entire place here or vbHackers! OH, AND he's nice about it!

[Black Tiger]

[off-topic on]
Thanks I will have a look on vbCoderz later too.
Normally I don't have a problem with getting support on vb.org. Like Blaine0002's hacks are supported very good by him.
I'm happy with the fact the at vb.org they close hacks and send a message when a vulnarability is found which is not fixed and they give some vbulletin support too. Do they do that at vbCoderz too?
[off-topic off]

I presume the coder does not know what causes my problem with vbshout. Sometimes coders say nothing, but it would already be fine if they state that they read the problem, are thinking about it, will fix it later on or something like that.

[deezelpope]

I'd hafta say yes, considering vbCoderz is a tiny place, which IMO is a good thing!

If you do check out vbHackers, beware! It seems everybody and their brother has solutions to the 'bugs'...especially the timestamp bug! Just found a good solution at vbCoderz, but I'm waiting on an answer from Shazz before I install that one.

Yeah, you should check it out.:up:

[daddygrim]

how do you clear out the shout box? I have a spammer...i banned them and their nasty messages still up.