Add-On Releases - vBTube 1.2.9 (CSRF protection added)

Do your visitors like searching for and sharing YouTube Videos with each other? Well now they can do it from your site. This Mod incorporates youtube into your site so you can view all the videos via category or the features & most popular videos. Users can also search the videos, meaning an unlimited amount of content for your site.

You can also post youtube links in your threads.

All searching & viewing is done on your site so your members never leave and you can add your own adverts or whatever to the displays to maximize revenue.

U CAN'T ADD VIDEOS WITH THIS HACK !!!



Live Demo here:

http://crackmuzik-gfx-elite.de/vBTube.php

Installation Instructions:

1. Upload the contents of the upload folder to your forum root directory.

2. Import product-vBTube in your admincp using the product manager.

3. In your style manager, find your navbar template and;

FIND:

<td class="vbmenu_control"><a href="calendar.php$session[sessionurl_q]">$vbphrase[calendar]</a></td>

Below that line add:

<td class="vbmenu_control"><a href="vBTube.php$session[sessionurl_q]">$vbphrase[vBTube_title]</a></td>

To add your own categories read this post:

https://vborg.vbsupport.ru/showpost....0&postcount=34

------------------------------------------------------------------------------------------------------
This is not the same like vBTubePRO - Lite Version 1.0.4 !!!

It's also not compatible with vBTubePRO - Lite Version 1.0.4 !!!
------------------------------------------------------------------------------------------------------

[bigtime]

Hi,

Here are some other security issues I think should be corrected:


On line 13 of cat.php, change:

PHP Code:

$pages = $_GET[page]; 


To:

PHP Code:

$pages = intval($_GET['page']); 


Same change to playlist.php on line 13, user.php on line 49.

On line 43 of vBTube.php, find this:

PHP Code:

if (!$_GET[page]) { $pages = 1; }
else { $pages = $_GET[page]; }
$pages = intval($_GET['page']); 


Change it to this:

PHP Code:

if (!$_GET[page]) { $pages = 1; }
else { $pages = intval($_GET['page']); } 


Hope I caught them all.


BTW, Playa82, thanks again for the great addon! Don't let anyone's rude comments discourage you!

Tim

[DoB Rhapsody]

Question!

How do i change the default videos that are displayed when someone goes to "vBTube.php"? I want to display gaming related content. I don't just want to link to a search result though. I also don't mind if it displays "results: xxx xxx" in the video area, as long as it's not a dynamic link.

[bigtime]

Originally Posted by DoB Rhapsody

Question!

How do i change the default videos that are displayed when someone goes to "vBTube.php"? I want to display gaming related content. I don't just want to link to a search result though. I also don't mind if it displays "results: xxx xxx" in the video area, as long as it's not a dynamic link.

Is there an existing gaming category at youtube? If not, the only way I know to do it would be the edit I posted earlier in this thread.

Tim

[DoB Rhapsody]

Originally Posted by bigtime

Is there an existing gaming category at youtube? If not, the only way I know to do it would be the edit I posted earlier in this thread.

Tim

Found it, thanks for that. One thing still bugs me though, why are all the videos in the categories foreign!!

[Playa82]

Originally Posted by bigtime

Hi,

Here are some other security issues I think should be corrected:


On line 13 of cat.php, change:

PHP Code:

$pages = $_GET[page]; 


To:

PHP Code:

$pages = intval($_GET['page']); 


Same change to playlist.php on line 13, user.php on line 49.

On line 43 of vBTube.php, find this:

PHP Code:

if (!$_GET[page]) { $pages = 1; }
else { $pages = $_GET[page]; }
$pages = intval($_GET['page']); 


Change it to this:

PHP Code:

if (!$_GET[page]) { $pages = 1; }
else { $pages = intval($_GET['page']); } 


Hope I caught them all.


BTW, Playa82, thanks again for the great addon! Don't let anyone's rude comments discourage you!

Tim

thanks, i already noticed the codes above. but it's still a xss error when u don't edit your .htaccess file...

[arco]

Here's some stars I made you can use with dark styles.

[kall]

Originally Posted by connkid25

You put your site URL. Such as example.com. Nothing else goes there.

You need to edit the htaccess in the root directory so it can be set for the entire site.

He said that he has a .htaccess in the forum root.

Telling him that setting one up "in the root directory so it can be set for the entire site" is both incorrect and misleading. The one in /forum/ will NOT inherit the values in the /root/ one. It will OVERRIDE them entirely.

[connkid25]

Originally Posted by kall

He said that he has a .htaccess in the forum root.

Telling him that setting one up "in the root directory so it can be set for the entire site" is both incorrect and misleading. The one in /forum/ will NOT inherit the values in the /root/ one. It will OVERRIDE them entirely.

It should be enabled globally on the server. Instead of being rude about it, you could have then told him to edit both. Simple and fixed!

[Magnumutz]

Okay, what does the new update contain?

[Playa82]

Originally Posted by Magnumutz

Okay, what does the new update contain?

XSS Protection