[AJAX] vBShout v2.0

[high]Staff Edit/Update[/high]

I have released an updated version of this hack (version 2.0.1), this version fixes some security issues with this hack. All version prior to this one allow users to insert html in their shouts, this can cause problems with them using html that breaks the site layout or malicious javascript. Download the new zip file (vBshout_fixed.zip) and upload the new vbshout.php file to patch/upgrade. If you want to manual instructions they are in the zip file, in the file bugfixes.txt

Second Staff update

I've uploaded a new version of this hack, dubbed '2.0.2'. This one should fix the html injection issues without breaking special characters. To upgrade, download the new zip file and upload the new vbshout.php file.

Please note that this only fixes the html injection issues. I do not use this hack on my own forum (although I've tested this on a client's board) so I will not be fixing the server load issues. I suggest you do not install this hack if you can't deal with the extra server load, as it's rather intensive.

- Brad

[high]End staff edit[/high]

Well, been a while since I've been to vb.org and released anything, thought i'd break the trend and whip up something quick while I have a little spare time.

A shoutbox as you would assume, a very simple one to start off with, but does include AJAX Technology, which pushes the shoutbox 1 step closer to live, messages from other people will appear with no refreshing, and so will yours that you post

A preview is below, i'd estimate a 50 second installation max

Primary Features:
- AJAX Technology (no refreshing)
- Administration control an display element options
- Fast format editor

Change Log::

- v1.1:
WOL (Who's Online) Correction

- v1.2:
New Posting Featurs (Bold/Italic/Underline/Colour/Font)
Admin Controls

- Change location/position of shoutbox
- Change number of shouts displayed
- Switch vbcode/similes on/off

- v1.3
Firefox javascript issue fixed
New Admin Controls

- Command Activation
- Swtch extra format options on/off
- Change position of editor (above/below messages)

New Commands

- /prune (Clears the shoutbox completely)
- /prune [username] (Clears all shouts posted by specified user)

- v1.4
Usergroup HTML Markup For Usernames
Clear Editor Button
Emoticons Pop Up Menu
Time display configurated to vBulletin settings
Username Links To Profile
New Admin Conrols

New vBShout Position (Directly Above Forums)
Banned Users
Banned Usergroups
Banned Permissions
Smilie Pop-Up Box Height
Smilie Pop-Up Box Width

New Commands

"/me" - Action message (all users are able to use this command)
/pruneshout [shout] - Deletes a single shout

- v1.5
Improved Smilies Display
XHTML 1.0 Transitional Valid (couple of errors fixed)
New Admin Options

Shoutbox Height
Smilies To Show
Shout Messages Order
Banned Permissions (fixed)

- v1.6
Bug Fixes:

- Unable to delete shouts that used /me command fixed
- Shouts being displayed from bottom-upwards only showed first 20 shouts

Automatically parses URL's

- v2.0
New Archive

- Displays shouts and pages
- Stats and top 10 shouters
- AJAX Edit/Delete (staff can edit/delete all shouts)

Enjoy,

- Zero Tolerance

[Drewish]

Some kids were playing with the shoutbox on my forum. One of them gave one of those message boxes that never go away no matter how many times you press "ok." Another one redirected the whole site to lemonparty.org via. javascript. A final person was able to modify the entire main page to the contents of lemonparty.org. This is very insulting, and although I've pruned those users, and banned them from the forum/shoutbox, It would be nice to prevent something like that from happening again....

[DWard]

I am not sure if it is just me, but unless I disable the shoutbox, I get the error below appear at the top of users profile pages etc...

Warning: array_merge() [function.array-merge]: Argument #1 is not an array in /includes/functions.php(1067) : eval()'d code on line 5

[DWard]

Originally Posted by DWard

I am not sure if it is just me, but unless I disable the shoutbox, I get the error below appear at the top of users profile pages etc...

Warning: array_merge() [function.array-merge]: Argument #1 is not an array in /includes/functions.php(1067) : eval()'d code on line 5

Appears to be related to the 'vbshout on all pages' mod.

[GCA-Shawn]

Originally Posted by Drewish

Some kids were playing with the shoutbox on my forum. One of them gave one of those message boxes that never go away no matter how many times you press "ok." Another one redirected the whole site to lemonparty.org via. javascript. A final person was able to modify the entire main page to the contents of lemonparty.org. This is very insulting, and although I've pruned those users, and banned them from the forum/shoutbox, It would be nice to prevent something like that from happening again....

You need to find your vbshout.php file that you uploaded during installation. Once you do, find this line:

if ($_POST['do'] == 'shout')
{
	$vbulletin->input->clean_array_gpc('p', array(

The next line should be changed to:

	'shout'	         => TYPE_NOHTML,

Currently, 'shout' is set to something other than TYPE_NOHTML. I don't remember what, exactly, cuz its been awhile since I changed it :ermm:

[futuregizmo]

can't view the smilies in the posts. i can see the smilie box, and if i click the smilie, the text format appears in the text box but after clicking, "Shout" the text itself is posted and not the actual smiley. anyone knows how to solve this?

[Taylor123]

i like it

[mrcrx]

my shout box has been freezing alot. are there any updates for this?

[bashy]

Originally Posted by mrcrx

my shout box has been freezing alot. are there any updates for this?

I thought it was just me...mine also freezes, with IE and FF
Although not as bad with FF

[Justin761985]

Hello,

Is there anyway I can enable censorship for the vBShout mod?

Thanks,
Justin.

[majorj0nny]

Originally Posted by RaZor Edge

Sorry to "bother" you with my "small insignificant host".

I was sharing this information for those who are concern about this script performance. And also to heard from those who already use it to see if they have problems.

It's great if it's work for you.

well - thanks for the info RaZor ... while Ive had VBshout working on our site for some time, and our host has never complained - we have had problems of our bandwidth usage shooting through the roof !

Ive tried things like pruning the shoutbox offen (ie - not letting it get over a certain number), limiting viewing to a few usergroups, disableing it in my forum views and only showing it on my homepage, turning off any fancy smilies, fonts, etc... and even trying to reduce the size of the vbshout.php file... Ive taken to looking for a 'simpler' shoutbox thats not so server killing.

Im not saying I dont love this shoutbox - Its perfect for my needs!

Im not trying to figure out just what is causing the heavy bandwidth usage - if it JUST the sites constant re-loading /clients reloading of vbshout.php ? or does disabling smilies really make a difference ?