Add-On Releases - Gift Subscriptions

This is a mod to let users buy a paid subscription for other members on the board. This addon is just updated from the user Jamoss. All credit goes to her, my team of people just updated it to work in 4.0.2.

Thanks zachd.

1. Modify 3 templates
2. modify 1 script (payments.php) -- PLEASE backup and save your old script for upgrade purposes.

[ZERO <ibis>]

What would I need to edit to support usernames with <> for example?

I think that htmlspecialchars() needs to be in here somewhere but I do not know where it needs to go.

Note that by adding in htmlspecialchars() it should also reduce the odds that this script can be exploited.

Fixed:

Replace:
$goo=$db->query_read_slave("SELECT userid from ". TABLE_PREFIX ."user where username='".$_POST['giftname']."'");

With:
$sqlname = htmlspecialchars($_POST['giftname']);
$goo=$db->query_read_slave("SELECT userid from ". TABLE_PREFIX ."user where username='".$sqlname."'");

[Kyoshokid]

Originally Posted by ZERO <ibis>

What would I need to edit to support usernames with <> for example?

I think that htmlspecialchars() needs to be in here somewhere but I do not know where it needs to go.

Note that by adding in htmlspecialchars() it should also reduce the odds that this script can be exploited.

Fixed:

Replace:
$goo=$db->query_read_slave("SELECT userid from ". TABLE_PREFIX ."user where username='".$_POST['giftname']."'");

With:
$sqlname = htmlspecialchars($_POST['giftname']);
$goo=$db->query_read_slave("SELECT userid from ". TABLE_PREFIX ."user where username='".$sqlname."'");

@op I just wanted to say thanks for this, my users are very happy with this mod.

@Zero this helped as i have a lot of users with weird names.

Working on vb4.1.0

[ZERO <ibis>]

As I now actually use vb 4 (previously I was using vb3 despite posting how to fix the error) I wanted to post a fully patched version for people to use as a base install so they do not have problems. I use this exact file myself for instructions and if it stops working for me I will post back here with an update if I manage to fix it myself.

[DM BoNeZ]

this mod is great but i tested if there is a way to choose what usergroup cant get gifted becuase i dont want any staff to get gifted the subscribed usergroup so i will have to remove it.. till there is a better gifting mod

[djfoxx]

Dosen't seem to work on v4.2

[Lilmikeishere]

Any fixes for this?

[Bluefin221]

payments.php does not exist or I cannot find it, where else should that segment of code go?

[ZERO <ibis>]

It does exist and is in the root directory for your vbb install. Also I am not sure if the one posted by the OP works or not but the one that I linked a few years back still works fine even on the latest version.

[tanzeelniazi]

its working in vb 4.2.0 or not ?
if use this mod then members paying subs like as gift ?