vBug Tracker Lite 3.5.1

[high]The XSS security flaw reported in this modification has been fixed by Staff and a new zip file (3.5.1a) uploaded.[/high]

Here is a port of my vBug Tracker hack from vb 3.0.x. This mimics the Bug Tracker found at vBulletin.

Details:

• 7 - table additions
  96 - Phrases Added
  3 - file additions
  2 - xml files
  8 - template additions
  3 - Plugins

Please click install for support! For those interested, the Pro version is in development and should be out soon. It will be released at vb-scripts.com.

Sept 25, 2005
Bug fixes:

• * Added Missing phrases for editing status, type & severity.
  * Fixed bug in changing displayorder

Sept 26, 2005
Bug Fixes/Changes

• * Fixed bugcache issue and tested
  * Added admin usergroup permissions

Sept 27, 2005 (Part 1)
Bug Fixes:

• * Fixed subscribe issues and missing phrases.

Sept 27, 2005 (Part 2)

• * Complete rewrite of the subscription piece including the unsubscribe.
  * Subscriptions fully tested and working from all aspects!

Nov 7, 2005

• * Fixed missing table prefix when editing status.
  * Fixed issue when editing severities.
  * Now supports secondary usergroups.

Nov 24, 2005

• * Fixed extra span tag in list template.
  * Fixed searching on version.
  * Added "unassigned" to dropdown.

Jul 11, 2006

• * XSS Flaw fixed by Staff.

To upgrade:

Import the product xml and select "Allow Overwrite".
Upload all the files overwriting the old ones.

Lastly... Please follow the instructions exactly as they are outlined in the documents/install.txt and in the order as listed to avoid any problems.

Updated for vBulletin 3.7, Get it here

[Dark_Wizard]

Originally Posted by Whissi

Yes! It would be nice If admins could configure vbug to report ne bug-reports.

User with bug-report subscription receiv their own answer... that's not good.

Another thing:

• Line-breaks looks like "\r\n"
• Option to edit bugs
• WYSIWYG Support :nervous:

This as well as many, many other enhancements is in the Pro version which will be released on vb-scripts.com when complete.

[theArchitect]

Originally Posted by hydrostatic

Nevermind... I figured it out.

In process of testing.

I have got it working (YA).

Though, the images seem a little strange. It is drawing the online and offline images to display the status of a bug. Are the alternate images? Or should I just make my own?

[HMBeaty]

I keep getting this when I change the settings in the "Usergroup Permissions" for vbug.....

Warning: mysql_real_escape_string() expects parameter 1 to be string, array given in /includes/class_core.php on line 635

Any help please?

[DS MrSinister]

looks like the same error i got with a another hackd and used this

try this it should fixd your problem

admincp/index.php?do=buildbitfields

[ManagerJosh]

Originally Posted by DS MrSinister

looks like the same error i got with a another hackd and used this

try this it should fixd your problem

admincp/index.php?do=buildbitfields

Any chance there's a demo version floating around?

[DS MrSinister]

Originally Posted by ManagerJosh

Any chance there's a demo version floating around?

http://www.sinisterslair.com/forums/vbugs.php

[Sparkz]

Originally Posted by twitch

If I try to delete one of the "statuses" in the admin panel, I get the following database error

Database error in vBulletin 3.5.0:

Invalid SQL:

	SELECT *
	FROM vbug_status
	WHERE vbug_statusid = 12;

MySQL Error  : Table 'clanvdqa_slave.vbug_status' doesn't exist
Error Number : 1146
Date         : Thursday, October 6th 2005 @ 01:18:48 PM
Script       : http://www.s2tg.com/forum/admincp/vbugs_admin.php?do=removestatus&vbug_statusid=12
Referrer     : http://www.s2tg.com/forum/admincp/vbugs_admin.php?do=modifystatus
IP Address   : 206.174.3.123
Username     : |s2tg|twitch
Classname    : vb_database

The fix here is to find

PHP Code:

    $status = $db->query_first("
    SELECT *
    FROM vbug_status
    WHERE vbug_statusid = " . $vbulletin->GPC['vbug_statusid'] . "
    "); 


and change that to

PHP Code:

    $status = $db->query_first("
    SELECT *
    FROM " . TABLE_PREFIX . "vbug_status
    WHERE vbug_statusid = " . $vbulletin->GPC['vbug_statusid'] . "
    "); 


The code in question is around line 711 in admincp/vbugs_admin.php

[twitch]

Awesome, thank you for helping me out!

[Whissi]

...if you fill out an bugreport and put special signs like "&" in the title, these signs aren't converted... so you are getting an xhtml error

Nothing special to fix it... but I think you should fix it

[ART]

Originally Posted by Sparkz

The fix here is to find

PHP Code:

    $status = $db->query_first("
    SELECT *
    FROM vbug_status
    WHERE vbug_statusid = " . $vbulletin->GPC['vbug_statusid'] . "
    "); 


and change that to

PHP Code:

    $status = $db->query_first("
    SELECT *
    FROM " . TABLE_PREFIX . "vbug_status
    WHERE vbug_statusid = " . $vbulletin->GPC['vbug_statusid'] . "
    "); 


The code in question is around line 711 in admincp/vbugs_admin.php

a Table_prefix should also be added in the query around line 895 (in the "removeseverity" section) if we want this functionality

in some templates the $session[sessionurl] / $session[sessionurl_q] is missing. And this is needed if a user's browser does not accept cookies.

with some little fixes vBug-lite works quite fine for me Thanks Dark_Wizard!

(me clicks install )