[AJAX] vBShout v2.0

[high]Staff Edit/Update[/high]

I have released an updated version of this hack (version 2.0.1), this version fixes some security issues with this hack. All version prior to this one allow users to insert html in their shouts, this can cause problems with them using html that breaks the site layout or malicious javascript. Download the new zip file (vBshout_fixed.zip) and upload the new vbshout.php file to patch/upgrade. If you want to manual instructions they are in the zip file, in the file bugfixes.txt

Second Staff update

I've uploaded a new version of this hack, dubbed '2.0.2'. This one should fix the html injection issues without breaking special characters. To upgrade, download the new zip file and upload the new vbshout.php file.

Please note that this only fixes the html injection issues. I do not use this hack on my own forum (although I've tested this on a client's board) so I will not be fixing the server load issues. I suggest you do not install this hack if you can't deal with the extra server load, as it's rather intensive.

- Brad

[high]End staff edit[/high]

Well, been a while since I've been to vb.org and released anything, thought i'd break the trend and whip up something quick while I have a little spare time.

A shoutbox as you would assume, a very simple one to start off with, but does include AJAX Technology, which pushes the shoutbox 1 step closer to live, messages from other people will appear with no refreshing, and so will yours that you post

A preview is below, i'd estimate a 50 second installation max

Primary Features:
- AJAX Technology (no refreshing)
- Administration control an display element options
- Fast format editor

Change Log::

- v1.1:
WOL (Who's Online) Correction

- v1.2:
New Posting Featurs (Bold/Italic/Underline/Colour/Font)
Admin Controls

- Change location/position of shoutbox
- Change number of shouts displayed
- Switch vbcode/similes on/off

- v1.3
Firefox javascript issue fixed
New Admin Controls

- Command Activation
- Swtch extra format options on/off
- Change position of editor (above/below messages)

New Commands

- /prune (Clears the shoutbox completely)
- /prune [username] (Clears all shouts posted by specified user)

- v1.4
Usergroup HTML Markup For Usernames
Clear Editor Button
Emoticons Pop Up Menu
Time display configurated to vBulletin settings
Username Links To Profile
New Admin Conrols

New vBShout Position (Directly Above Forums)
Banned Users
Banned Usergroups
Banned Permissions
Smilie Pop-Up Box Height
Smilie Pop-Up Box Width

New Commands

"/me" - Action message (all users are able to use this command)
/pruneshout [shout] - Deletes a single shout

- v1.5
Improved Smilies Display
XHTML 1.0 Transitional Valid (couple of errors fixed)
New Admin Options

Shoutbox Height
Smilies To Show
Shout Messages Order
Banned Permissions (fixed)

- v1.6
Bug Fixes:

- Unable to delete shouts that used /me command fixed
- Shouts being displayed from bottom-upwards only showed first 20 shouts

Automatically parses URL's

- v2.0
New Archive

- Displays shouts and pages
- Stats and top 10 shouters
- AJAX Edit/Delete (staff can edit/delete all shouts)

Enjoy,

- Zero Tolerance

[Shazz]

Some old 3.5 mods your going to have to live without. There are better improved shoutboxes on vB.org

[Skierpetros]

I installed but i can see it why>?

[jeff2681]

can someone tell me how i and my mods can edit stuff in the shout box thanks

[Shazz]

Originally Posted by jeff2681

can someone tell me how i and my mods can edit stuff in the shout box thanks

Click on archive. Make sure admin options are checked in vboptions

[jeff2681]

i dont see an option for admin option in the vboptions page. i didnt see the archive you were talking about so i just clicked on vbulletin options and click on vboptions that way but still didnt see an admin option there. what am i doing wrong? thanks

[teamremodeling]

hi.

i installed the shoutbox on our forum http://www.billievers.com/ and noticed that " quotes are converted to htmlentities - ".
i could hack it out, but first i wanna report it here, for reference and may get some input about something i may have missed

thanks for this one!

[Stifmeister2]

Originally Posted by teamremodeling

hi.

i installed the shoutbox on our forum http://www.billievers.com/ and noticed that " quotes are converted to htmlentities - ".
i could hack it out, but first i wanna report it here, for reference and may get some input about something i may have missed

thanks for this one!

Yeah it's always like this, but I think there is a fix posted somewhere in this topic. (I know since I've go it from this topic)

[mikey1991]

I downloaded this, and it doesnt allow certain characters, such as " > < " I need to know why? and how to fix it, as i use these characters lot

&lt; and &gt; are really spmming up the shoutbox, as most of my members use it.

A direct link to a fix would be the best, thanks

[CPOWA]

Thanks Zero Tolerance!

Installed on V 3.7.3 PL1, works great. I hope my users will like it

[mikey1991]

Originally Posted by Lady Azriel

I'm gonna post this here, because I could not find a way to do this anywhere else on the internet. I saw a bunch of questions regarding this, but no one seemed to want to answer it.

To be allowed to use very simple symbols like <, >, &, and " and not have them printed into HTML entities like &lt;, &gt;, &amp; and &quot;:

Open vbshout.php and find:

PHP Code:

$text = htmlspecialchars_uni(trim($text)); 


Replace with:

PHP Code:

$text = trim($text); 


This will allow you to use symbols and still disallow HTML in shouts.

FOr those who had my prob, this is the fix. I searched, Thanks to Lady Azriel