vBGarage v3.1.1 (now with GD-Lib support!)

[high]***[/high]CLICK HERE FOR vB3.0.5 INSTALLER/UPDATE[high]***[/high]

vBGarage v3.1.1 (now with GD-Lib support!)

Description
This hack will allow your users to create a virtual garage where they can store photos, details, etc.. about their vehicle (this can be modified to suit forums of other interests).

Latest Uploads will be displayed on Garage List.

Forum users can now leave comments in member garages.

Admin functions are available in the AdminCP.

This version contains the ability to limit access by usergroup(s). All templates are 100% XHTML Verified!

Information
Tested and developed on vB 3.0.0 Gold.

Requires
GD 2.0+ Library

Demo
http://www.sffba.net/forum/vbgarage.php?do=list (Temporary)

This hack, as like the rest of my hacks, are FREE. However, if you enjoy this hack and feel the need to donate something for my time you can do so by clicking the icon below:


*NOTE: Those who donate are explicitly granted permission to remove the "Powered by" information from the vBGarage footer.

*NOTE: When donating, please include your forum url. Thanks!

Version History
v3 - Initial release. Let's hope I don't have alot of entries here.
v3.0.1 - Added GD-Lib Support!
v3.1.0 - Added User Comments, Latest Uploads on Garage List, AdminCP Options
v3.1.1 - Added ability for Admin to "edit" users' garages. Use ImageCopyResampled(); over ImageCopyResized(); for better thumbnail quality.

Planned Features
- Multiple entries per user.
- Possible integration with Photopost/Coppermine/etc..

If you use this, please click

* Installation script by John

[hr]-[/hr]
UPGRADES

v3.1.0 -> v3.1.1 UPGRADE INSTRUCTIONS

v3.0.1 -> v3.1.0 UPGRADE INSTRUCTIONS

v3.0 -> v3.0.1 UPGRADE INSTRUCTIONS

[hr]-[/hr]
MODIFICATIONS/ADD-ONS

[high]1. Add "Who's Online" Location by magnus[/high]
[high]2. Organize Your vBGarage Templates by magnus[/high]
[high]3. Increase Thumbnail Image Quality (v3.1.1 and older) by magnus[/high]
[high]4. Alphabetize Garage List by magnus[/high]
[high]5. Add "Latest Uploads" to FORUMHOME by magnus[/high]
[high]6. EvilLS1's Timeslip Database Integration by SVTOA[/high]
[high]7. Installer/Uninstaller by Action-N[/high]
[high]8. vBulletin 3.0.5 Compatible Installer/Update by noppid[/high]

[joeychgo]

Very good points..........

Originally Posted by noppid

The mention of securtiy holes got my attention. I'm no expert, but I can follow the leader pretty well. Most/some of the security patches lately seem to dealing with cleaning user inputed text fields. So on that note I looked and saw the only thing this hack does is add slashes to inputed test. I added some agressive clean up of all the user text input fields on my copy of this hack. It would probably be a good idea if you do too.

If anyone else is aware of parts of this code that need strength, please make a suggestion so we can all benefit.

Thanks

[cinq]

Does the proper use of globalize clear the possible above mentioned security 'holes' ?

[noppid]

To me it appears that since the vars are being passed, in our case, to globalize without the type also being passed that nothing is being done to them.

[joeychgo]

I might also suggest - as much as I want an update - that you hold off for the major vB upgrade thats coming -

[noppid]

Originally Posted by joeychgo

I might also suggest - as much as I want an update - that you hold off for the major vB upgrade thats coming -

I did my own branch of this code from the installer to the script. You may want to secure your's too.

I don't expect updates and the author does not respond to post suggested updates.

It seems it's everyman for himslef if you run this currently.

[zemic]

Hiya....

This is a great script. Good job doing it. One thing, would it be possible to use ImageMagik instead of GD ? Its a bit of a problem (as im finding) gettings hosts to update GD 1.6 to Gd 2.0. ImageMagik can be installed fairly easily on your virtual host via telnet and FTP if its not already on the server.

Sorry if this has come up before.... tried to read as many pages as possible! But there are 100+ now !

[drumsy]

Simple question regarding templates.

I've had this hack installed for awhile but just noticed something odd in User CP. Along the left-hand side, Edit MyGarage (my name for it) appears over Edit Options. However, when I click on Edit Options, both Edit MyGarage and Edit Options are highlighted. When I click on any other item on the left-hand side, such as Edit Profile, etc., only that one is highlighted.

How can I fix this?

[noppid]

Originally Posted by drumsy

Simple question regarding templates.

I've had this hack installed for awhile but just noticed something odd in User CP. Along the left-hand side, Edit MyGarage (my name for it) appears over Edit Options. However, when I click on Edit Options, both Edit MyGarage and Edit Options are highlighted. When I click on any other item on the left-hand side, such as Edit Profile, etc., only that one is highlighted.

How can I fix this?

You have almost certainly made a typo in your edit of this step...

4. Perform the following TEMPLATE edits:

	4a. In USERCP_SHELL:

	Find:
	#######################
	<tr>
		<td class="$navclass[options]" nowrap="nowrap"><a class="smallfont" href="profile.php?$session[sessionurl]do=editoptions">$vbphrase[edit_options]</a></td>
	</tr>
	#######################

	Add ABOVE:
	#######################
	<!-- START VBGARAGE HACK -->
	<if condition="$permissions['genericpermissions'] & CANVBGARAGE">
	<tr>
		<td class="$navclass[options]" nowrap="nowrap"><a class="smallfont" href="vbgarage.php?$session[sessionurl]do=editgarage">$vbphrase[vbgarage_edit]</a></td>
	</tr>
	</if>
	<!-- END VBGARAGE HACK -->
	#######################

The stock template mod does not have that anomoly.

[noppid]

With The consent of Magnus, here's an update for vBulletin 3.0.5

This update encompasses 3 things.

• Install instructions: update of the /includes/init.php edit and a note about new update option in installer
• The installer: New update option for fixing the ACP options after vB updates
• Operating script: Agressive and redundant striping of HTML/PHP codes in text input fields
• Unimplemented and not supported: GZ compression of images (installer and script)

The install instructions reflect a change we have found necessary in init.php since the original version was written. There is now an additional note on one new option to the installer that is for repairing vBgarage after vBulletin updates.

The operating script is updated. The mods attempt to stop injection attacks on the text input fields. Two methods thought to be useful in this attempt were used. One was from php.net and the other directly from vB code. They seem to do the job.

However, nothing is guaranteed! These updates are tested and in use on two boards though. Click either of the links in my signature to see a live demo.

If you attempt to use this code you should do a full backup of your database. Do not assume it will work perfectly, things can go wrong. Backup your database! Back it up twice. Download a copy.

Having said that, here's the files...

[drumsy]

Originally Posted by noppid

You have almost certainly made a typo in your edit of this step...

4. Perform the following TEMPLATE edits:

	4a. In USERCP_SHELL:

	Find:
	#######################
	<tr>
		<td class="$navclass[options]" nowrap="nowrap"><a class="smallfont" href="profile.php?$session[sessionurl]do=editoptions">$vbphrase[edit_options]</a></td>
	</tr>
	#######################

	Add ABOVE:
	#######################
	<!-- START VBGARAGE HACK -->
	<if condition="$permissions['genericpermissions'] & CANVBGARAGE">
	<tr>
		<td class="$navclass[options]" nowrap="nowrap"><a class="smallfont" href="vbgarage.php?$session[sessionurl]do=editgarage">$vbphrase[vbgarage_edit]</a></td>
	</tr>
	</if>
	<!-- END VBGARAGE HACK -->
	#######################

The stock template mod does not have that anomoly.

I have reverted that template to original, then redid the edit, and unfortunately am still encountering this problem.