vB Journal 1.5 Beta 3

vB Journal 1.5.0 Beta 3
by Anthony Scudese

• Description:
  Allow your community members to express themselves like never before with their own journal! vB Journal 1.5.0 extends the popular vB Journal 1.0.x system with tons of new features and more stability than ever before.
• Features:
  • Full vBulletin 3.0.x intergration
  • 1.0.1 Features:
    • Comment System
    • "GoToMyJournal"
    • link from postbit to journal
    • link from profile to journal
    • link from memberlist to journal
    • usergroup permissions
    • journal buddy system(by Wonko)
    • Journal Search Engine
    • journal highlight
    • bbcode parsing
    • smilie parsing
    • Admin Cp Support Section
    • Journal Status Icons
    • Who is viewing
    • most recent journal entries and journals
    • Who Can View for journals and entries
    • Complete journal and entry privacy
    • Comment on entries or journals
    • Journal Moderation(Like Post and Thread Moderation)
    • Entry Moderation(Like Post and Thread Moderation)
    • Pagination
    • Rating System
    • Lock System
    • Moods
    • "Can Have Journal" on a per user basis
    • Ip Logging
    • Journalists can name their journals
    • Export entries in TXT or XML format
    • Flood System
    • Administrators have absolute permissions
    • Search in Journal
    • Last Entry on Journal Index
    • Numerous AdminCp Settings
    • Unique Standard vB Images for vB Journal
    • View Single Entry
  • 1.5.0 Beta 1 Features:
    • Multiple Syndication Settings Including RSS 0.91, RSS 2.0, Atom 1.0, XML, CSV, and TXT.
    • vBulletin Standard Editors Added
    • Preview Entry
    • Reverse Entry Order
    • Improved Search Engine
    • Recent Comments for an Entry on Single Entry Page
    • Admin Settable Sort Orders
    • Printable Entry Format
    • Dynamic Last Entry
    • Database Indexes For More Speed
    • Optimized Code
    • Comes with Template, Phrase, and Database Installer and Upgrader.
    • Increased Security
  • 1.5.0 Beta 2 Features:
    • Reworked Editor Templates
    • Support For WYSIWYG
    • Back-End Post Checker
    • New Journal Buddy Interface
    • Navigation Bars Added Back
    • New Settings for Minimum/Maximum Postings
    • Known Bug Issues Solved
  • 1.5.0 Beta 3 Features:
    • Known Bugs Resolved
    • New Feature Settings
    • Majority of Settings Converted to Bitfields
    • Some Maintenance Tools Added
• Disclaimer:
  • Support may be denied if provided files are edited/modified and support may be stopped at any time due to any circumstances.
  • The copyright notice may not be modified or removed.
• Support:
  • Where to Get Support?
    • AIM: Antonbomb22
    • antonbomb22(at)gmail.com
    • this thread!
  • How to Report An Error:
    1. State The Error Message
    2. The Version of both vBulletin and vB Journal you are using.
    3. What page the error occured on(i.e. journal.php?do=showjournal)
    4. Screenshot if necessary
  • Read All The Entire First Post and Any Official Posts Following Before Posting An Error/Problem
• Side Credits:
  • Zero Tolerance
  • KirbyDE
  • Danny.vbt
  • WonkotheSane
• Contents of vBJournal_1-5-0_Beta3.zip:
  • install.txt
  • Upload
    • journal.php
    • admincp
      • journaladmin.php
      • journalinstaller.php
      • journalmaintenace.php
      • journalupgrade.php
      • journalupgrade2.php
      • journalupgrade3.php
      • journalupgrade4.php
      • vbj_install_class.php
      • vbj_phrases_install.xml
      • vbj_templates_install.xml
      • vbj_phrases_upgrade2.xml
      • vbj_templates_upgrade2.xml
      • vbj_templates_upgrade3.xml
    • includes
      • vbjournal_class.php
    • images
      • buttons
        • delete.gif
        • discuss.gif
        • newcomment.gif
        • newentry.gif
        • newentry_small.gif
        • newjournal.gif
      • statusicon
        • journal_lock.gif
        • journal_new.gif
        • journal_old.gif
  • Upgrade
    • 1-0-1_to_1-5-0_Beta1
      • Instructions.txt
    • 1-5-0_Beta1_to_1-5-0_Beta2
      • Instructions.txt
    • 1-5-0_Beta2_to_1-5-0_Beta3
      • Instructions.txt
• Demo:
  • http://www.animationtalk.com/forum/journal.php
• Updates/Fixes:
  • See Post Below or Click Here.

Please Click Install

[AN-net]

XSS Vulnerability Patched!

All running Beta 1 prior to 11/19/05 are strongly encouraged to apply this patch or download the updated file then overwrite.

To patch this security risk find the following in journal.php(Find and Replace All Instaces):

PHP Code:

$message = trim(convert_wysiwyg_html_to_bbcode($_POST['WYSIWYG_HTML'], 0)); 


Replace that with:

PHP Code:

$message = trim(htmlspecialchars_uni(convert_wysiwyg_html_to_bbcode($_POST['WYSIWYG_HTML'], 0))); 


Find in journal.php(Find and Replace All Instances):

PHP Code:

$entry['message'] = trim(convert_wysiwyg_html_to_bbcode($_POST['WYSIWYG_HTML'], 0)); 


Replace that with:

PHP Code:

$entry['message'] = trim(htmlspecialchars_uni(convert_wysiwyg_html_to_bbcode($_POST['WYSIWYG_HTML'], 0))); 


I have updated the zip and attached the patched file below.

[xfaethorx]

upgraded from 1.0.1 to current beta and i'm getting

Invalid SQL: SELECT
journals.journal_id, journals.journalname, journals.journaldesc,
journals.journalist, journals.journalist_id, entrycount, commentcount, usertextfield.jbuddylist, ipaddress, journals.lastentry,
journals.lastentry_date, journals.private, journals.lastentry_id, journals.lastentry_misc, journals.status, journals.journalviews,
journals.journal_totalrating AS totalrating, journals.journal_totalvotes AS totalvotes
FROM journals AS journals
LEFT JOIN usertextfield AS usertextfield ON (journals.journalist_id=usertextfield.userid)
WHERE journal_id IN(1,2,3,4,5,6,8,9)
ORDER BY
LIMIT 0,10

on journal.php although everything seems ok if i access the journals directly via user name...

really confused need some help ehre.

[AN-net]

Originally Posted by xfaethorx

upgraded from 1.0.1 to current beta and i'm getting


Invalid SQL: SELECT
journals.journal_id, journals.journalname, journals.journaldesc,
journals.journalist, journals.journalist_id, entrycount, commentcount, usertextfield.jbuddylist, ipaddress, journals.lastentry,
journals.lastentry_date, journals.private, journals.lastentry_id, journals.lastentry_misc, journals.status, journals.journalviews,
journals.journal_totalrating AS totalrating, journals.journal_totalvotes AS totalvotes
FROM journals AS journals
LEFT JOIN usertextfield AS usertextfield ON (journals.journalist_id=usertextfield.userid)
WHERE journal_id IN(1,2,3,4,5,6,8,9)
ORDER BY
LIMIT 0,10

on journal.php although everything seems ok if i access the journals directly via user name...

really confused need some help ehre.

you must set the order by in your admincp/journal settings

[xfaethorx]

yeah i just went in and saved the current settings and its all working now...
sorry dumbass moment there...

jesus im special, sorry

[AN-net]

Originally Posted by xfaethorx

yeah i just went in and saved the current settings and its all working now...
sorry dumbass moment there...

jesus im special, sorry

not a problem, we all have our moments of idiocy.

[xfaethorx]

yeah thing is so far i've managed quite a few decades of idiocy...... by the way great work on the hack! The upgrade was simplicity after my own mistake! keep it up!

[AN-net]

Originally Posted by xfaethorx

yeah thing is so far i've managed quite a few decades of idiocy...... by the way great work on the hack! The upgrade was simplicity after my own mistake! keep it up!

im currently working on beta 2 which adds some features

[xfaethorx]

nice one..i know on another forum blog software has been asked for but with a few more additions on here and this is it to be honest! It'd be nice to have a collapsable comments block so you could expand the comments under a journal entry..or some kind of alternative thread views and obviously a now listening too and all the like.

Anyway you'll have a better idea of what you want to do with it than me. I'm just happy its still supported seeing as everyone else is going 3.5 and im staying 3.0.x

[AN-net]

Originally Posted by xfaethorx

nice one..i know on another forum blog software has been asked for but with a few more additions on here and this is it to be honest! It'd be nice to have a collapsable comments block so you could expand the comments under a journal entry..or some kind of alternative thread views and obviously a now listening too and all the like.

Anyway you'll have a better idea of what you want to do with it than me. I'm just happy its still supported seeing as everyone else is going 3.5 and im staying 3.0.x

can you explain the alternative thread views thing?

also 1.5 will be the last version of vB Journal on 3.0.x, future versions past 1.5 will be designed for 3.5.x. I felt as though I owed it the users to include a more stable and featured version before I migrate to 3.5.

[xfaethorx]

just the intergration if possible of the the linear , hybrid and threaded display modes.

so when you clicked on comments you'd be taken to comments that are pretty much styled like showthread.php with the ability to change the display type.

It would be nice to see the comments like showthread.php making the journal entry and comments a thread unto themselves, then you could support more display views, the postbit templates, use the quick reply box as the add new comment and other bits and bats.You could potentially do stuff for journal attachments as well but that would mean changes to newattachments.php and attachment.php. However thats a big change and would mean much more intergration work.

It would however be nice to have the comments similar to postbit and postbit_legacy so you can see user avatars etc.