Top 'X' Stats

[high]Security Fix: The uploaded version fixes all issues concerned with the recent security vulnerabilities. Sorry I haven't been around I don't really do anything plugin wise anymore.[/high]

Oh this version also works with all current version of vB 3.6. So feel free to use it on that version.

- InfiniteWebby

The low down

Well this is the vB 3.5.0 version of my hack. It is much the same as the original except that for some added stuff that I never released

Basically what it does is show the Top 'X' (edited via the vBulletin options in the admincp) newest members, top posters and newest replies on the Forumhome.

So what's new in this version?

Well for one all settings, which include amount of stats to show on forumhome and the extended page, thread title and username truncation, excluded forums and 'new' and 'old' thread prefixes.

Secondly there is now an extra page where you are able to choose exactly how many stats to show.

And lastly and most importantly it only takes 3 simple steps to install =)

What's on the horizon?

- More "stat blocks" including top reputation and top thread based on views or replies. If you have a suggestion please let me know, prefferably via pm.
- Proper can view other users threads permissions. At the moment I cannot think of how to block other people threads while still showing your own without totally re-writing the hack =(.

Version 1.2.1 is a re-release with who's online additions as well as some template changes. So you are best to reinstall the whole thing all over again.

So anyway enjoy and click install.

[Nuguru]

Originally Posted by Wild-Wing

https://vborg.vbsupport.ru/showpost....69&postcount=6 read that man

Thanks everyone for helping out.

Nuguru

[InfiniteWebby]

I'm sorry for not fixing the problem sooner but when I got an email saying that there was a problem I patched my own code. Apparently when the vB.org admins patched this version though, they only patched one instance. Anyway I've uploaded the version CURRENTLY running on my site (of which a "hacker" tried to attack but was unsuccesful and got laughed away), my version also shows the full security friendly version of the title when you mouseover the truncated version in the latest threads and also adds the missing phrases to vB3.6 versions.

[DementedMindz]

InfiniteWebby nice to see you come back and fix the problem. Not to many would come back and do that.

[Shazz]

Thanx for the update-

[DementedMindz]

OH BOY The zip was there now its gone did something happen? ahh I see n/m

[Nuguru]

Originally Posted by InfiniteWebby

I'm sorry for not fixing the problem sooner but when I got an email saying that there was a problem I patched my own code. Apparently when the vB.org admins patched this version though, they only patched one instance. Anyway I've uploaded the version CURRENTLY running on my site (of which a "hacker" tried to attack but was unsuccesful and got laughed away), my version also shows the full security friendly version of the title when you mouseover the truncated version in the latest threads and also adds the missing phrases to vB3.6 versions.

Hello,

I have made the changes suggested earlier in this thread:

heres a fix for it
find in newthread.php:
if ($_POST['do'] == 'postthread')

then find:
'subject' => TYPE_STR,
change the TYPE_STR to TYPE_NOHTML

so I am wondering if I need to go ahead and do the overwrite with this new updated version?

I am using 3.5.4. with Top Stats 1.6.1a


Thank You for the Effort!

Nuguru

[DementedMindz]

Persoanly I would remove it and reinstall it to be sure. I mean the hack takes 2 mins to setup. And I dont think I would keep the other code installed.

[teedizz]

Database error in vBulletin 3.5.2:

Invalid SQL:

### INSERT QUERY GENERATED BY fetch_query_sql() ###
INSERT INTO plugin
	(`active`, `executionorder`, `title`, `hookname`, `phpcode`, `product`)
VALUES
	('1', '5', 'Top \'X\' Stats by InfiniteWebby', 'cache_templates', 'if (THIS_SCRIPT == \"index\" OR THIS_SCRIPT == \"topXstats\") {\r\n\r\n	global $globaltemplates;\r\n\r\n	$globaltemplates = array_merge($globaltemplates, array(\'topXstats_stats_bit\', \'topXstats_member_bit\', \'topXstats_poster_bit\', \'topXstats_thread_bit\'));\r\n\r\n}', 'topXstats');

MySQL Error  : Unknown column 'executionorder' in 'field list'
Error Number : 1054

i get this error now, anyone know why?

[socalsoccer]

When trying to import product. Trying to overwrite.

3.5.2

Database error in vBulletin 3.5.2:

Invalid SQL:

### INSERT QUERY GENERATED BY fetch_query_sql() ###
INSERT INTO plugin
(`active`, `executionorder`, `title`, `hookname`, `phpcode`, `product`)
VALUES
('1', '5', 'Top \'X\' Stats by InfiniteWebby', 'cache_templates', 'if (THIS_SCRIPT == \"index\" OR THIS_SCRIPT == \"topXstats\") {\r\n\r\n global $globaltemplates;\r\n\r\n $globaltemplates = array_merge($globaltemplates, array(\'topXstats_stats_bit\', \'topXstats_member_bit\', \'topXstats_poster_bit\', \'topXstats_thread_bit\'));\r\n\r\n}', 'topXstats');

MySQL Error : Unknown column 'executionorder' in 'field list'
Error Number : 1054

[peterska2]

I've uploaded a 3.5.x version of the fixed modification. If you are using 3.5.x please make sure that you download and use the 3.5.x zip file.