Ventrilo Status v1.0

Keywords: Ventrilo, Voice, Chat, VoIP, FORUMHOME

Description:

Displays clients connected to your Ventrilo server on your FORUMHOME -- similar to that of "Who's Online".

Details:

Basically, this is a modified version of the publically available PHP Ventrilo Status Scripts. This version, however, has been modified to allow for direct vBulletin integration. All settings are managed through the AdminCP and all output is configured via templates.

Usage of this script requires knowledge of Ventrilo server administration. Your server must first be configured to receive and process UDP messages. This can be done in the server's INI file under the [Status] section. All server versions 2.1.2 and higher come with examples showing the options available to you. However, the UDP support is disabled by default so that they are compliant with older versions. Reference the "ventrilo_srv.htm" file that accompanies the server package for more details.

This thread on vBulletin.org will not address proper server configuration or server related connectivity issues, for all questions relating to those topics or similar, please visit the official Ventrilo Tech Support forums.

Installation:

1. Download the attached archive and import the product-ventrilo_status.xml file via the Product Manager.

2. Upload the files located in the archive to their respective folders.

3. Obtain the ventrilo_status* (or ventrilo_status.exe for Win32 platforms) and put it in a preferred location (ie. /forum/) and CHMOD the file to 755.

4. Configure the options via your AdminCP (vBulletin Options > Ventrilo Status Settings)

Version History:

• 1.0 - Initial release, here's to hoping...
• 1.1
  • Patched a theoretical XSS vulnerability. By theoretical, I mean the script would only be vulnerable under a specific set of circumstances which are less likely to occur than that of your server being directly hit by an errant meteor. However, if you're the paranoid sort, feel free to upgrade. Otherwise, there are no other changes.

* The file ventrilo_status(.exe) is NOT included with this package as it is distributed with the Ventrilo server package (Linux/Win32). If you are not personally hosting your Ventrilo server and instead using a hosting company, you can obtain this file by downloading the appropriate package here. You ONLY need the ventrilo_status(.exe) file.

[The_Rayman]

Hi Magnus,

Great plug mate! Finally got it working on the board.
By any chance, do you know how to get the info to a vbadvanced frontend? I'd also like to see on the frontpage who's online.

Thanks!

[twitch]

does it work with 3.7?

[magnus]

Originally Posted by twitch

does it work with 3.7?

It should work fine.

[Kahoona]

I am confused as to where exactly to get ventrilo_status.exe The only file I find close to that is ventrilostatus.php in the PHP Ventrilo Status Scripts package.

[magnus]

Originally Posted by Kahoona

I am confused as to where exactly to get ventrilo_status.exe The only file I find close to that is ventrilostatus.php in the PHP Ventrilo Status Scripts package.

All information is included in the original post:

Originally Posted by magnus

* The file ventrilo_status(.exe) is NOT included with this package as it is distributed with the Ventrilo server package (Linux/Win32). If you are not personally hosting your Ventrilo server and instead using a hosting company, you can obtain this file by downloading the appropriate package here. You ONLY need the ventrilo_status(.exe) file.

[Dsru123]

Well, after getting vB updates that this is OK to use, I tried again. I tried 4 times in the past and no workie. I understand that all have different issues and most can be resolved with time and patience.

First, let me say I have 2 other Vent status working fine
www.jettclan.net and www.jettcommunity.com

The server host is configured properly or I would not be getting correct information on my pages. I thought this would be cool and never can get it to work.
See attached config for your script and associated screenshots.

Again, I understand that their will be different issues, but when a lot of the posts here say they have the same issue, one must assume that either it dosnt work in some configs, or instructions are not clear enough. I am not trying to come off as a ass and I apoligize if I am, but this script would be cool if it worked with my site and config and it dosnt.

So, I either do not understand the instructions or it will not work with my config and the other vent status scripts that ARE working on my site is a act of god.

Again, I apoligize if I am coming across like a ass, I realy am one but do not want to be one to you.
I also talked with my host for the page, used the right ventrilo_status for BSD and they said it should work, for whatever that means.

[magnus]

Originally Posted by Dsru123

Well, after getting vB updates that this is OK to use, I tried again. I tried 4 times in the past and no workie. I understand that all have different issues and most can be resolved with time and patience.

First, let me say I have 2 other Vent status working fine
www.jettclan.net and www.jettcommunity.com

The server host is configured properly or I would not be getting correct information on my pages. I thought this would be cool and never can get it to work.
See attached config for your script and associated screenshots.

Again, I understand that their will be different issues, but when a lot of the posts here say they have the same issue, one must assume that either it dosnt work in some configs, or instructions are not clear enough. I am not trying to come off as a ass and I apoligize if I am, but this script would be cool if it worked with my site and config and it dosnt.

So, I either do not understand the instructions or it will not work with my config and the other vent status scripts that ARE working on my site is a act of god.

Again, I apoligize if I am coming across like a ass, I realy am one but do not want to be one to you.
I also talked with my host for the page, used the right ventrilo_status for BSD and they said it should work, for whatever that means.

This hack is nothing more than a frontend for the Ventrilo Status Scripts. If you believe the problem lies within this hack, I would suggest downloading this package and getting ventrilotest.php to report everything is OK. If after that this hack still does not work, we can proceed further.

The setup on this can, at times, be tricky -- which makes it hard, if not impossible, to dutifully suport. All I can say is, try getting the scripts in the link above (namely ventrilotest.php) to work first -- be sure you have permissions set correctly as well as the absolute path. If you do get it working, the same settings used in the configuration file can be applied to the hack settings within vBulletin.

Without direct access to the server myself, that's really the most I can offer.

[fci]

If someone's username, for example, is </er> it is rendered as html. could lead to an interesting exploit... needs some htmlentities() loving

[magnus]

Originally Posted by fci

If someone's username, for example, is </er> it is rendered as html. could lead to an interesting exploit... needs some htmlentities() loving

Aside from the fact that this was patched in the 1.1 release, the Ventrilo client/server packages do not allow specific characters in usernames as well they have character length limits. So, unless someone writes a custom Ventrilo client and/or server with these restrictions removed, the exploit is basically theoretical.

[matDDH]

Giving this a shot but thus far i am unable to figure out why it doesnt work properly. Here are somethings that might be useful for support.

I use ventrilo.org I have emailed them and they said I should be good to go as they have preconfigured their servers so that the status script can do its job

My host is unix based. I have downloaded and tried I think all server files and have tried each of the ventrilo_status files in each one just to make sure i didnt miss anything and yes I have put cmod them to 755.

I guess the best i can hope for in this situation is to be told exactly which ventrilo_status to use, then ill just have to do some more trial and error maybe somehow I wrote down the path to the status file incorrectly.

thank you in advance.