Top 'X' Stats

[high]Security Fix: The uploaded version fixes all issues concerned with the recent security vulnerabilities. Sorry I haven't been around I don't really do anything plugin wise anymore.[/high]

Oh this version also works with all current version of vB 3.6. So feel free to use it on that version.

- InfiniteWebby

The low down

Well this is the vB 3.5.0 version of my hack. It is much the same as the original except that for some added stuff that I never released

Basically what it does is show the Top 'X' (edited via the vBulletin options in the admincp) newest members, top posters and newest replies on the Forumhome.

So what's new in this version?

Well for one all settings, which include amount of stats to show on forumhome and the extended page, thread title and username truncation, excluded forums and 'new' and 'old' thread prefixes.

Secondly there is now an extra page where you are able to choose exactly how many stats to show.

And lastly and most importantly it only takes 3 simple steps to install =)

What's on the horizon?

- More "stat blocks" including top reputation and top thread based on views or replies. If you have a suggestion please let me know, prefferably via pm.
- Proper can view other users threads permissions. At the moment I cannot think of how to block other people threads while still showing your own without totally re-writing the hack =(.

Version 1.2.1 is a re-release with who's online additions as well as some template changes. So you are best to reinstall the whole thing all over again.

So anyway enjoy and click install.

[Paul M]

Originally Posted by nishv

Have you managed to get rid of the meta refresh bug on script?

I have applied the fix posted here ;

https://vborg.vbsupport.ru/showpost....&postcount=250

To both versions (3.5 was done in July, the unofficial 3.6 version today).

AFAIK, this fixes the problem you are referring to.

[q8-star]

thank you Paul ..

One more thing I hope if you replace the first post attached .zip file with your patched one .

[Paul M]

The main zip (for 3.5) was patched in July.

[Nuguru]

Hello Everyone,

I understand there is a security vulnerability - http://www.vbulletin.com/forum/showthread.php?t=198902, were we are being told to uninstall Top X Stats.

I would rather keep this mod so I am wondering if this issue has been addressed. I see from previous posts that there has been some security issues addressed but no sure if it is this one.

I am running vb 3.5.4 and Top X Stats 1.2.1a

Is there something I need to do here to get the most secure version for vb 3.5.4.?


Thank You,


Nuguru

[Monica05]

I was in the process of disabling this since I followed your link about security and I got a new user on my forum named ANTHRAX.

Then the user posted "hacked by ANTHRAX" for their one and only post.

[Shazz]

thanx paul!

[49er]

Does that code work for 3.5.2 and 3.5.4 boards ? as my 3.5.2 one got hacked but i have added a new code in newthread.php taken from vb forum after i got my site back.

[Wild-Wing]

hmm teepeg would that be what i posted?

[Nuguru]

Hello,

It's a shame to hear that we are incountering a security problem with Top X Stats and I am in the process of finding the solution to ensure that 1.6.1a is secure for my vb 3.5.4. Any help would be appreciated.

In addition, I was wondering if there has been any recent security issues with VBStatExtended since it seems to be a very similar mod to Top X Stats?


Thanks in Advance,

Nuguru

[Wild-Wing]

<a href="https://vborg.vbsupport.ru/showpost.php?p=1066969&postcount=6" target="_blank">https://vborg.vbsupport.ru/showp...69&postcount=6</a> read that man