[AJAX] vBShout v2.0

[high]Staff Edit/Update[/high]

I have released an updated version of this hack (version 2.0.1), this version fixes some security issues with this hack. All version prior to this one allow users to insert html in their shouts, this can cause problems with them using html that breaks the site layout or malicious javascript. Download the new zip file (vBshout_fixed.zip) and upload the new vbshout.php file to patch/upgrade. If you want to manual instructions they are in the zip file, in the file bugfixes.txt

Second Staff update

I've uploaded a new version of this hack, dubbed '2.0.2'. This one should fix the html injection issues without breaking special characters. To upgrade, download the new zip file and upload the new vbshout.php file.

Please note that this only fixes the html injection issues. I do not use this hack on my own forum (although I've tested this on a client's board) so I will not be fixing the server load issues. I suggest you do not install this hack if you can't deal with the extra server load, as it's rather intensive.

- Brad

[high]End staff edit[/high]

Well, been a while since I've been to vb.org and released anything, thought i'd break the trend and whip up something quick while I have a little spare time.

A shoutbox as you would assume, a very simple one to start off with, but does include AJAX Technology, which pushes the shoutbox 1 step closer to live, messages from other people will appear with no refreshing, and so will yours that you post

A preview is below, i'd estimate a 50 second installation max

Primary Features:
- AJAX Technology (no refreshing)
- Administration control an display element options
- Fast format editor

Change Log::

- v1.1:
WOL (Who's Online) Correction

- v1.2:
New Posting Featurs (Bold/Italic/Underline/Colour/Font)
Admin Controls

- Change location/position of shoutbox
- Change number of shouts displayed
- Switch vbcode/similes on/off

- v1.3
Firefox javascript issue fixed
New Admin Controls

- Command Activation
- Swtch extra format options on/off
- Change position of editor (above/below messages)

New Commands

- /prune (Clears the shoutbox completely)
- /prune [username] (Clears all shouts posted by specified user)

- v1.4
Usergroup HTML Markup For Usernames
Clear Editor Button
Emoticons Pop Up Menu
Time display configurated to vBulletin settings
Username Links To Profile
New Admin Conrols

New vBShout Position (Directly Above Forums)
Banned Users
Banned Usergroups
Banned Permissions
Smilie Pop-Up Box Height
Smilie Pop-Up Box Width

New Commands

"/me" - Action message (all users are able to use this command)
/pruneshout [shout] - Deletes a single shout

- v1.5
Improved Smilies Display
XHTML 1.0 Transitional Valid (couple of errors fixed)
New Admin Options

Shoutbox Height
Smilies To Show
Shout Messages Order
Banned Permissions (fixed)

- v1.6
Bug Fixes:

- Unable to delete shouts that used /me command fixed
- Shouts being displayed from bottom-upwards only showed first 20 shouts

Automatically parses URL's

- v2.0
New Archive

- Displays shouts and pages
- Stats and top 10 shouters
- AJAX Edit/Delete (staff can edit/delete all shouts)

Enjoy,

- Zero Tolerance

[gameslover]

I have a little problem, it seems that the symbol "€" don't want to appear in the shoutbox, have you the same problem too ? Is there a way to fix that ?
Thanks

[haris_led]

Hello, my members suggested me to put somewhere a link to the smilies.
So, i think there is somethink that we do not use, the word "emotions" when smlies button is clicked.
http://img85.imageshack.us/my.php?image=picture4ag0.png
You can edit the template forumhome_vbshout and find the word Emoticons, it is in the 13th line in the default template
You can replace that with:

<a href='http://www.MYSITE.com/forum/misc.php?do=showsmilies'>Emoticons</a>

Enjoy!

[Rickie3]

version 5.0 of shout?

[leestrong7]

Great modification!

[ed2k_2]

Hi guys,

It's seem that I intalled it perfectly except that the smiles don't appear on the shoutbox panel. What maybe the cause why smilies don't appear?

Thanks

[Ambie]

My host made me take this out because they said the server load was to high. Now we are all depressed. Anyone know of any good host that will let me run this?

[Ronin Storm]

Originally Posted by Ambie

My host made me take this out because they said the server load was to high.

The server load for this is shockingly high. Unless you own your own server then you can probably kiss this mod goodbye.

[Ambie]

Originally Posted by Ronin Storm

The server load for this is shockingly high. Unless you own your own server then you can probably kiss this mod goodbye.

Yeah, after checking with several other hosts this morning. I realize this. No one seems to want this or any other real time chat applications. Oh well. Reluctantly clicking uninstall. :cry:

[Ronin Storm]

This post replaces my previous post on this subject, which I have (or will very shortly) edit to include a pointer direct to this post. Please see the bottom of this post for a bug fix to the original post.

BEGIN PREVIOUS POST:

Not seen this fix mentioned in the past 30 or so pages, nor does it come up on a thread search, so hopefully this is useful to some of you.

The Apostrophe Bug

The problem is that when you type a shout with one or more apostrophes in it when you go to edit that shout only the text up to but not including the first apostrophe appears. This is because, behind the scenes, the shouts are held in blocks delimited by apostrophes... so an apostrophe in the text truncates the result returned.

I've been running this hack-fix for around a week on a live board that receives 1000 or so shouts per week and I've not had any trouble.

In vbshout.php, on approx line 223, find:

PHP Code:

$Shout['s_shout']  = bbcodeparser($Shout['s_shout']); 


... replace with:

PHP Code:

$Shout['s_shout']  = bbcodeparser(str_replace("'", "'", $Shout['s_shout'])); 


On approx line 338, find:

PHP Code:

$vbulletin->GPC['shout'] = convert_urlencoded_unicode($vbulletin->GPC['shout']); 


... replace with:

PHP Code:

$vbulletin->GPC['shout'] = convert_urlencoded_unicode(str_replace("'", "'", $vbulletin->GPC['shout'])); 


On approx line 409, find:

PHP Code:

$Shout['s_shout']  = bbcodeparser($Shout['s_shout']); 


... replace with:

PHP Code:

$Shout['s_shout']  = bbcodeparser(str_replace("'", "'", $Shout['s_shout'])); 


In essence, this replaces instances of apostrophes with the entity reference ' for storage and then converts the entity references back to apostrophes just in time to be displayed.

Please note that I've used the various fixes (and fixes of those fixes) to remove the injection issues highlighted by staffers here. If you're getting " instead of " in your shoutbox then you've probably not applied the fixes described in this thread on the posted "fixed" vbShout code and you probably should not use this hack-fix until you have.

Please let me know if you have any problems with this fix.

(ZT seems to be on indefinite leave so I've bypassed the bug reporting / waiting for response cycle so that people can try this out. I hope I don't offend anyone by this!)

END PREVIOUS POST.

BUG FIX (24 July 2006)

I discovered that there is an issue. Roughly, the issue occurs when you post a shout that has apostrophes, then go to edit it, submit that edit (which also has apostrophes in it) and then edit it again. The second edit retains the original apostrophe bug. This is because the AJAX edit was not also protected in the same way as the original shout.

The changes below should resolve this issue.

In vbshout.php, on approx line 518. find:

PHP Code:

$vbulletin->GPC['shout'] = convert_urlencoded_unicode($vbulletin->GPC['shout']); 


Replace with:

PHP Code:

$vbulletin->GPC['shout'] = convert_urlencoded_unicode(str_replace("'", "'", $vbulletin->GPC['shout'])); 


On approx line 524, find:

PHP Code:

$Shout['s_shout']  = bbcodeparser($Shout['s_shout']); 


Replace with:

PHP Code:

$Shout['s_shout']  = bbcodeparser(str_replace("'", "'", $Shout['s_shout'])); 


And that should be okay now. I believe.

Let me know if you have any issues with it!

[thisgeek]

Thanks for the bugfix.

The only thing I've done differently is to change the ' symbol to " &_#39;" (added an underscore cuz the post converts it to an apostrophe) because I read somewhere that ' may not work in IE.

I've also come across an issue (not related to the Apostrophe fix) where normal users can't edit or delete their own shouts. It appears to work, but nothing happens. If this is happening to you, here's the fix:

Edit vbshout.php:

In the function:

// ---------------------------------------------------
// AJAX Edit Shout
// ---------------------------------------------------

Find this line:

PHP Code:

if ($Shout['sid'] != $vbulletin->userinfo['userid'] && !can_moderate()) 


and change it to:

PHP Code:

if ($Shout['s_by'] != $vbulletin->userinfo['userid'] && !can_moderate()) 


In the function:

// ---------------------------------------------------
// AJAX Delete Shout
// ---------------------------------------------------

Find the line:

PHP Code:

if ($Shout['sid'] != $vbulletin->userinfo['userid'] && !can_moderate()) 


and change it to:

PHP Code:

if ($Shout['s_by'] != $vbulletin->userinfo['userid'] && !can_moderate()) 


Hope this helps.