Prevent Censored Words From Being Striped From Custom Fields?

[yotsume]

Prevent Censored Words From Being Striped From Custom Not Visible Fields?

Is it possible to remove some code that strips the censored words we enter in the "Censored Words" field in the vbAdminCP. I need the censored words to NOT be stripped from our not visible custom fields.

Example:
I do not want my members to be able to post their last names. So I enter their last names in the Censored Words list and that works great. However... their last names are now lost in their custom fields in their profile that only admins were set to see.

How can I stop the censored words from striping none visible custom fields?

The site is running vb3.7x

[yotsume]

BUMP! Lynn anyone please help.

[BirdOPrey5]

I know there's a 3.8 mod to disable the word censor per user... I know this isn't what you need but you could probably look at the code and get a good idea of where to start.

There's also this old one to disable per forum: https://vborg.vbsupport.ru/showthread.php?t=98269

[yotsume]

No sure that code helps at all. I have looked already. I need the censored words to not strip private fields. Nothing to do with forums or usergroups.

[kh99]

I think you can edit includes/class_dm_user.pm. Around line 1208 or so, add the 'hidden' column to the query (scroll right to see what I changed):

// check extra profile fields
$profilefields = $this->dbobject->query_read_slave("
	SELECT profilefieldid, required, size, maxlength, type, data, optional, regex, def, editable, hidden	
	FROM " . TABLE_PREFIX . "profilefield
	$all_fields_sql
	ORDER BY displayorder
");

Then just below that around line 1235, I added the first two red lines and made a change in the line below that:

if (in_array($profilefield['profilefieldid'], $field_ids) AND ($all_fields != 'register' OR $profilefield['editable']))
{
	if (!$profilefield['hidden'])
		$value = fetch_censored_text($value);
	$value = trim(substr($value, 0, $profilefield['maxlength']));
	$value = (empty($value) AND $value != '0') ? false : $value;
}

Of course this doesn't bring back any data that's already been censored.

[yotsume]

Ok I am trying this right now... I will report back.... THANKS!

I am sure you meant to edit the file: class_dm_user.php
--------------- Added 29 Nov 2010 at 17:45 ---------------

My code is a little different on vb3.7x

                if (in_array($profilefield['profilefieldid'], $field_ids) AND ($all_fields != 'register' OR $profilefield['editable']))
                {
                    if (!$profilefield['hidden'])
                    $value = fetch_censored_text($value);
                    $value = trim($value, substr(fetch_censored_text($value), 0, $profilefield['maxlength']));
                    $value = (empty($value) AND $value != '0') ? false : $value;

Above is how I made your second edit. Testing now...

--------------- Added [DATE]1291078374[/DATE] at [TIME]1291078374[/TIME] ---------------

BINGO it looks like it worked perfectly!

Added new censored word, rebuilt post cache, typed the word and its blocked but the private field still has the data!

I run a very large international classroom website. The kids are not allowed to post their last names anywhere on the site. We collect the last names at registration time and then add their last names to the censored words.

MUCH THANKS!

[kh99]

It could be different because mine came from v3.8.3, but it could also be that I made it confusing by not including before/after code, just the "after". Here's before/after:

if (in_array($profilefield['profilefieldid'], $field_ids) AND ($all_fields != 'register' OR $profilefield['editable']))
{
	$value = trim(substr(fetch_censored_text($value), 0, $profilefield['maxlength']));
	$value = (empty($value) AND $value != '0') ? false : $value;
}

if (in_array($profilefield['profilefieldid'], $field_ids) AND ($all_fields != 'register' OR $profilefield['editable']))
{
	if (!$profilefield['hidden'])
		$value = fetch_censored_text($value);	
	$value = trim(substr($value, 0, $profilefield['maxlength']));
	$value = (empty($value) AND $value != '0') ? false : $value;
}

ETA: Posted that before you repsonded. Kind of surprised that works - you may want to make sure it matches what I posted, I think your "trim" has too many params to it and might work by accident.

[yotsume]

A larger chunk of my code around these lines is:

                if (in_array($profilefield['profilefieldid'], $field_ids) AND ($all_fields != 'register' OR $profilefield['editable']))
                {
                    if (!$profilefield['hidden'])
                    $value = fetch_censored_text($value);
                    $value = trim($value, substr(fetch_censored_text($value), 0, $profilefield['maxlength']));
                    $value = (empty($value) AND $value != '0') ? false : $value;
                }
                else if ($all_fields == 'register' AND $profilefield['data'] !== '')
                {
                    $value = unhtmlspecialchars($profilefield['data']);
                }
                else
                {
                    continue;
                }
                $customfields .= "$profilefield[title] : $value\n";
                $regex_check = true;

I think were looking at altered files already due to version differences. But... its works... so no sure what might go wrong or now here.

You said:

I think your "trim" has too many params to it and might work by accident.

What do you see wrong in my code and where?

[kh99]

I think this line:

            $value = trim($value, substr(fetch_censored_text($value), 0, $profilefield['maxlength']));

Should be:

            $value = trim(substr($value, 0, $profilefield['maxlength']));

I think what you have works because trim() only looks at the first argument, but the value doesn't go through substr() to make sure it's no longer than the max length.

ETA: ...but it's not a big deal, I'm pretty sure it will be OK the way it is.

[yotsume]

Originally Posted by kh99

I think this line:

            $value = trim($value, substr(fetch_censored_text($value), 0, $profilefield['maxlength']));

Should be:

            $value = trim(substr($value, 0, $profilefield['maxlength']));

I think what you have works because trim() only looks at the first argument, but the value doesn't go through substr() to make sure it's no longer then the max length.

ETA: ...but it's not a big deal, I'm pretty sure it will be OK the way it is.

Well I am using your edit here and still seems to work fine with no noticeable errors.

The Next Step:

My next step that I have to get solved is how to code a php file so I can pull from my database that one private field which would generate a list of my members last names... any takers on this one???