Major Additions - DownloadsII

There's a vB4 version of this mod available: https://vborg.vbsupport.ru/showthread.php?t=231427

DownloadsII

DownloadsII is a download database that integrates into vBulletin. It allows you to upload files, add images to them, create categories, link to external files - and more. It is very flexible and has many options.

Because a lot of people keep on asking this:
This mod works with any version of vBulletin 3.7.x and 3.8.x!

It's also coded 100% XHTML 1.0 Transitional valid, just like vBulletin itself.



Instructions & Support

You can find an installation manual in the zip package (Readme-Install.txt).

We try to answer most questions asked in this thread. Please don't send any pm's if we don't ask for them, as we said we try to give a high level of support in this thread. Don't forget to click the install link, so you will receive important update notifications.

Screenshots & Live demo

At the bottom of this post, you can find 6 screenshots of the front-end and back-end (AdminCP part) of the DownloadsII software. You can see the newest version in action at the Minatica.be Downloads (Dutch).

Changelog (version 5.1.2)

Jelle

• Backported CSRF security fix from the vB 4 release
• Added permission check for Update Counters
• Fixed PHP warnings when running PHP 5.3
• Removed the imagecreatefrombmp() function. It doesn't exist.
• Added permission check for rating submissions

You can find all the changelogs of this and older versions here.

Help!!! I can't upload large files??

This is probably the second most asked question. Have a look at this post for the solution.

It doesn't work with GARS?!

If you also use the latest version of GARS, you will get the "Fields marked in RED must be filled in!" error when uploading a file. I provided a fix here on the GARS forums.

Addons

We are offering 3 addons for this mod at the moment (have a look at the bottom of this post for them). DownloadsII contains 5 hook locations for the vBulletin plugin systems, so you can add extra functionality without file edits.

Do you want to help expanding DownloadsII (if you are a coder)? Check out this post!

Notes

• ecDownloads Buddy is NOT compatible with this version. If you are using the Buddy, you should UNINSTALL it before installing DownloadsII ver 5.x.x. The Buddy's features are now integrated into DownloadsII.
• DownloadsII is a direct derivative work from Ron1n's ecDownloads.

Addons

• DownloadsII ver 5.0 vbAdvanced Add-On
• DownloadsII PM moderation notification
• DownloadsII Create New Thread Add-On
• DownloadsII Simple RSS Feed Add-On
• DownloadsII[Add-On] - Upload Rules

[RS_Jelle]

Originally Posted by Black Tiger

If anyone has a good downloads.php addon for the vbseo google/yahoo sitemap generator (stand alone mod) which does not generate a parse error because it misses a ; somewhere (at least the error notice says this) I would really be obliged.
Because support is very slow in that mod, if any.

I'm sorry, but I'm not very familiar with that mod or other vBSEO stuff

Originally Posted by maidos

the bbcode is not activated on download main page. when i view the files through the category i only see commands while i visit the download page i can see the bbcode activated...

That's normal behaviour. We are stripping all BBCode on the category view intentionally. Otherwise we would break it sometimes as the description is truncated there.

[Pirat3]

{removed upon request]

[Charles_1]

Originally Posted by RS_Jelle

For people experiencing the GARS compatibility problem, I have posted a fix here

Thanks man, really! Downloads II is working again at our site thanks to you :-)

[Pirat3]

ok i just moved servers to a VPS one, this mod worked just fine till after change. now everytime i try to download a file it gives a "file error". (all my users have this issue).

Or the file will open in a new firefox tab with a bunch of weird symbols etc..

Any fix or reason how to fix?

I CHMOD 777 the downloads directory, downloads.php is CHMOD 664 tried 777 but no cigar.

[Marco van Herwaarden]

Originally Posted by Pirat3

i found a HUGE bug in this that can lead to a SQL injection through the header of this mod (remote blind type). i put in the table i want the SQL info of and it get printed in my XPL script :X

Any fixes?

If you are aware of a possible exploit in a modification, please use the Report Post feature on the first post of this thread, and provide details on the exploit. Please do not post in public about any posible exploit details.

Also see Mod Exploit Guidelines

[maidos]

im turning this mod off until the so called sql exploirt has been cleared off

[Black Tiger]

Is there indeed an existing exploit at the moment? People can say there is, but I won't turn downloads II off until it's confirmed.

@RSJelle: I think the problem is in the code of the addon. Probably the "order by" piece. It's complaining about a missing ; or something, you are good at code, maybe you can see what's wrong because you know a lot of code and also know which tables are used in the present downloads II version.
This is the downloads addon code they use:

	$mods = $db->query("SELECT id,name FROM " . TABLE_PREFIX . "dl_cats ORDER BY `id`");
	while ($mod = $db->fetch_array($mods))
	{	
		$url = $vbseo_vars['bburl'].'/downloads.php?do=cat&id='.$mod['id'];

		if(VBSEO_ON)
			$url = vbseo_any_url($url);

  		vbseo_add_url($url, 1.0, '', 'daily');
	}

	$mods = $db->query("SELECT id as fid FROM " . TABLE_PREFIX . "dl_files");
	while ($mod = $db->fetch_array($mods))
	{	
		$url = $vbseo_vars['bburl'].'/downloads.php?do=file&id='.$mod['fid'];

		if(VBSEO_ON)
			$url = vbseo_any_url($url);
  		vbseo_add_url($url, 1.0, '', 'daily');
	}

From the previous version the change to "dl_files" and "dl_cats". Previously Order by was by 'order' which now they changed to 'id' but maybe this is not correct anymore or there are some other problems.
If you can't see it, oke, bad luck for me then.

[Pirat3]

Originally Posted by Pirat3

ok i just moved servers to a VPS one, this mod worked just fine till after change. now everytime i try to download a file it gives a "file error". (all my users have this issue).

Or the file will open in a new firefox tab with a bunch of weird symbols etc..

Any fix or reason how to fix?

I CHMOD 777 the downloads directory, downloads.php is CHMOD 664 tried 777 but no cigar.

Anyone know whats wrong?

[Marco van Herwaarden]

Originally Posted by maidos

im turning this mod off until the so called sql exploirt has been cleared off

There has been 1 user who claims there is a vulnerability, but even though we invited him to provide details of this alleged exploit, we never received any additional information.

Until we recieve more detailed information on the alleged exploit, there is not much we can add to this.

To avoid confusion: There is no confirmed exploit at this time in this modification.

[RS_Jelle]

Originally Posted by Pirat3

ok i just moved servers to a VPS one, this mod worked just fine till after change. now everytime i try to download a file it gives a "file error". (all my users have this issue).

Or the file will open in a new firefox tab with a bunch of weird symbols etc..

Any fix or reason how to fix?

I CHMOD 777 the downloads directory, downloads.php is CHMOD 664 tried 777 but no cigar.

Check the chmod of the files inside the downloads directory. They should have chmod 666 permissions.

You don't need to chmod downloads.php as there's no need to change it

Originally Posted by Black Tiger

@RSJelle: I think the problem is in the code of the addon. Probably the "order by" piece. It's complaining about a missing ; or something, you are good at code, maybe you can see what's wrong because you know a lot of code and also know which tables are used in the present downloads II version.
This is the downloads addon code they use:

*code*

From the previous version the change to "dl_files" and "dl_cats". Previously Order by was by 'order' which now they changed to 'id' but maybe this is not correct anymore or there are some other problems.
If you can't see it, oke, bad luck for me then.

I don't see any problems with it at first sight. What's the exact error you are getting?