[AJAX] vBShout v2.0

[high]Staff Edit/Update[/high]

I have released an updated version of this hack (version 2.0.1), this version fixes some security issues with this hack. All version prior to this one allow users to insert html in their shouts, this can cause problems with them using html that breaks the site layout or malicious javascript. Download the new zip file (vBshout_fixed.zip) and upload the new vbshout.php file to patch/upgrade. If you want to manual instructions they are in the zip file, in the file bugfixes.txt

Second Staff update

I've uploaded a new version of this hack, dubbed '2.0.2'. This one should fix the html injection issues without breaking special characters. To upgrade, download the new zip file and upload the new vbshout.php file.

Please note that this only fixes the html injection issues. I do not use this hack on my own forum (although I've tested this on a client's board) so I will not be fixing the server load issues. I suggest you do not install this hack if you can't deal with the extra server load, as it's rather intensive.

- Brad

[high]End staff edit[/high]

Well, been a while since I've been to vb.org and released anything, thought i'd break the trend and whip up something quick while I have a little spare time.

A shoutbox as you would assume, a very simple one to start off with, but does include AJAX Technology, which pushes the shoutbox 1 step closer to live, messages from other people will appear with no refreshing, and so will yours that you post

A preview is below, i'd estimate a 50 second installation max

Primary Features:
- AJAX Technology (no refreshing)
- Administration control an display element options
- Fast format editor

Change Log::

- v1.1:
WOL (Who's Online) Correction

- v1.2:
New Posting Featurs (Bold/Italic/Underline/Colour/Font)
Admin Controls

- Change location/position of shoutbox
- Change number of shouts displayed
- Switch vbcode/similes on/off

- v1.3
Firefox javascript issue fixed
New Admin Controls

- Command Activation
- Swtch extra format options on/off
- Change position of editor (above/below messages)

New Commands

- /prune (Clears the shoutbox completely)
- /prune [username] (Clears all shouts posted by specified user)

- v1.4
Usergroup HTML Markup For Usernames
Clear Editor Button
Emoticons Pop Up Menu
Time display configurated to vBulletin settings
Username Links To Profile
New Admin Conrols

New vBShout Position (Directly Above Forums)
Banned Users
Banned Usergroups
Banned Permissions
Smilie Pop-Up Box Height
Smilie Pop-Up Box Width

New Commands

"/me" - Action message (all users are able to use this command)
/pruneshout [shout] - Deletes a single shout

- v1.5
Improved Smilies Display
XHTML 1.0 Transitional Valid (couple of errors fixed)
New Admin Options

Shoutbox Height
Smilies To Show
Shout Messages Order
Banned Permissions (fixed)

- v1.6
Bug Fixes:

- Unable to delete shouts that used /me command fixed
- Shouts being displayed from bottom-upwards only showed first 20 shouts

Automatically parses URL's

- v2.0
New Archive

- Displays shouts and pages
- Stats and top 10 shouters
- AJAX Edit/Delete (staff can edit/delete all shouts)

Enjoy,

- Zero Tolerance

[divided_by_fear]

Originally Posted by md_doc

anyway as it could lead to some very bad security issues like users embeding another iframe and getting your sessions values which would then allow them act as you and administer the forums as they want which would be bad.

could you please point out where this is ? i would like to fix that i have no need for html on mine anyway... please let me know where to add this in im not sure what u mean when you posted just add in htmlentities($text) where you see $text can u give a example please

[Snake]

Originally Posted by aranthorn

ZT has given up on this hack?

Nah he's just busy with some other projects.

[md_doc]

Originally Posted by divided_by_fear

could you please point out where this is ? i would like to fix that i have no need for html on mine anyway... please let me know where to add this in im not sure what u mean when you posted just add in htmlentities($text) where you see $text can u give a example please

Replace lines 114 - 126 (function bbcodeparser in vbshout.php)

PHP Code:

 function bbcodeparser($text = '')
 {
     global $vbulletin;
 
     if ($vbulletin->options['shout_bbcode'])
     {
         return $vbulletin->vbshout_parse->parse(convert_url_to_bbcode($text), 'nonforum');
     }
     else
     {
         return $text;
     }
 } 


with

PHP Code:

 function bbcodeparser($text = '')
 {
     global $vbulletin;
 
     if ($vbulletin->options['shout_bbcode'])
     {
         return $vbulletin->vbshout_parse->parse(convert_url_to_bbcode(htmlentities($text)), 'nonforum');
     }
     else
     {
         return htmlentities($text);
     }
 } 


What this does is it stops the html from being rendered.

I am not sure how vB normally handles it but this is a quick fix at least.

[TTG]

Originally Posted by Karsh

I just need commands lmao

Did you read the hack information at the top of every page .. all commands are listed

[Alphasims]

Are there a way to translate shoutbox tekst?

Tekst i want in Norwegian:
-Total Shouts:
-Shouts In Past 24 Hours:

so on.........

i tried Languages & Phrases manager, i cant find it. thanks for a great ShoutBox

[Ohiosweetheart]

I installed this... wow... it couldn't have been any easier!

question tho: is there a way to edit this so that we can access ALL of our smilies, not just the ones showing in the top pane? AND is there a way to increase the height (NOT width) of the SB so that more than 4 shouts are viewable at a time?

[mbader71]

This is really great

very easy to install

very easy to use

very useful

thanks alot man

Just one quick question

How do I open the shoutbox admin control?

[Snake]

Admin CP - vB Options - Shoutbox Settings

[Ohiosweetheart]

thank you!

[Mobilestan]

help me !!!
i have vb 3.5.2 and
my vbshout dont work for Guest

get this error :

Warning: Invalid argument supplied for foreach() in /vbshout.php on line 288

how i can solve this problem ??

thankss