[AJAX] vBShout v2.0

[high]Staff Edit/Update[/high]

I have released an updated version of this hack (version 2.0.1), this version fixes some security issues with this hack. All version prior to this one allow users to insert html in their shouts, this can cause problems with them using html that breaks the site layout or malicious javascript. Download the new zip file (vBshout_fixed.zip) and upload the new vbshout.php file to patch/upgrade. If you want to manual instructions they are in the zip file, in the file bugfixes.txt

Second Staff update

I've uploaded a new version of this hack, dubbed '2.0.2'. This one should fix the html injection issues without breaking special characters. To upgrade, download the new zip file and upload the new vbshout.php file.

Please note that this only fixes the html injection issues. I do not use this hack on my own forum (although I've tested this on a client's board) so I will not be fixing the server load issues. I suggest you do not install this hack if you can't deal with the extra server load, as it's rather intensive.

- Brad

[high]End staff edit[/high]

Well, been a while since I've been to vb.org and released anything, thought i'd break the trend and whip up something quick while I have a little spare time.

A shoutbox as you would assume, a very simple one to start off with, but does include AJAX Technology, which pushes the shoutbox 1 step closer to live, messages from other people will appear with no refreshing, and so will yours that you post

A preview is below, i'd estimate a 50 second installation max

Primary Features:
- AJAX Technology (no refreshing)
- Administration control an display element options
- Fast format editor

Change Log::

- v1.1:
WOL (Who's Online) Correction

- v1.2:
New Posting Featurs (Bold/Italic/Underline/Colour/Font)
Admin Controls

- Change location/position of shoutbox
- Change number of shouts displayed
- Switch vbcode/similes on/off

- v1.3
Firefox javascript issue fixed
New Admin Controls

- Command Activation
- Swtch extra format options on/off
- Change position of editor (above/below messages)

New Commands

- /prune (Clears the shoutbox completely)
- /prune [username] (Clears all shouts posted by specified user)

- v1.4
Usergroup HTML Markup For Usernames
Clear Editor Button
Emoticons Pop Up Menu
Time display configurated to vBulletin settings
Username Links To Profile
New Admin Conrols

New vBShout Position (Directly Above Forums)
Banned Users
Banned Usergroups
Banned Permissions
Smilie Pop-Up Box Height
Smilie Pop-Up Box Width

New Commands

"/me" - Action message (all users are able to use this command)
/pruneshout [shout] - Deletes a single shout

- v1.5
Improved Smilies Display
XHTML 1.0 Transitional Valid (couple of errors fixed)
New Admin Options

Shoutbox Height
Smilies To Show
Shout Messages Order
Banned Permissions (fixed)

- v1.6
Bug Fixes:

- Unable to delete shouts that used /me command fixed
- Shouts being displayed from bottom-upwards only showed first 20 shouts

Automatically parses URL's

- v2.0
New Archive

- Displays shouts and pages
- Stats and top 10 shouters
- AJAX Edit/Delete (staff can edit/delete all shouts)

Enjoy,

- Zero Tolerance

[rogersnm]

I'll just say that i have an average of 8% server load and i have the shoutbox running my host doesn't have a problem

And yes there is version 2.0 of vbshout at vbh

[TygerTyger]

Originally Posted by Ronin Storm

The server load for this is shockingly high. Unless you own your own server then you can probably kiss this mod goodbye.

Well that's not really true. But people will so insist on using ever-cheaper hosts, thus you get what you pay for.

I'm on shared, it's not cheap, I can run the Shoutbox fine and it gets more than 1000 shouts a week.

[Rickie3]

I dont have a problem with my host either,i'm on shared and I pay $100 USD annually for my hosting package,and I dont find the shout to be server intensive,It is the most used feature on my board and my forum would be naked without it,with over a 1000+ shouts a week,so at the end of the day its all down to what hosting package you bought

[Watched]

Originally Posted by rogersnm

I would just like to point out version 5.0 is out out http://gzevolution.net/ The site is currently down but once it's up enjoy the new hack..

erm.. inferno shout v5.0 is for websites, not for forums. current vbshout (shoutbox for forums) is still only 2.0

[Ronin Storm]

Originally Posted by rogersnm

I'll just say that i have an average of 8% server load and i have the shoutbox running my host doesn't havea porblem

Have you checked the overall bandwidth usage of the shoutbox versus, say, anything else on vbulletin? I have a memory that it's something like two magnitudes difference. My site has recently changed hardware (I run on a dedicated server) and with the change I no longer have access to my webstats... when I have them again I'll post what I see.

Originally Posted by thisgeek

The only thing I've done differently is to change the ' symbol to " &_#39;" (added an underscore cuz the post converts it to an apostrophe)

It shouldn't matter what the translation is. I use the entity reference because they are effectively equivalent. However I could just as easily used "a89fysfh" or some other random collection of characters as long as I'm pretty sure they're a unique string. The changes I've made convert to the entity on storage but convert it back to an apostrophe for display.

Originally Posted by thisgeek

because I read somewhere that ' may not work in IE.

I have never had issues with ' as an entity reference. It's one of the more basic ones. XHTML, under some circumstances, appears to have trouble with certain entity references it doesn't recognise (&nbsp but then I just use the unicode for those ones ( );

Edit: Realised I'd not responded to everyone I wanted to.

[rogersnm]

not any noticable difference, guess it depends on your host

I get 1000+ shouts a day

ps: read the sig

[Rio Grande]

Originally Posted by Ronin Storm

...

BUG FIX (24 July 2006)

I discovered that there is an issue. Roughly, the issue occurs when you post a shout that has apostrophes, then go to edit it, submit that edit (which also has apostrophes in it) and then edit it again. The second edit retains the original apostrophe bug. This is because the AJAX edit was not also protected in the same way as the original shout.

The changes below should resolve this issue.

In vbshout.php, on approx line 518. find:

PHP Code:

$vbulletin->GPC['shout'] = convert_urlencoded_unicode($vbulletin->GPC['shout']); 


Replace with:

PHP Code:

$vbulletin->GPC['shout'] = convert_urlencoded_unicode(str_replace("'", "'", $vbulletin->GPC['shout'])); 


On approx line 524, find:

PHP Code:

$Shout['s_shout']  = bbcodeparser($Shout['s_shout']); 


Replace with:

PHP Code:

$Shout['s_shout']  = bbcodeparser(str_replace("'", "'", $Shout['s_shout'])); 


And that should be okay now. I believe.

Let me know if you have any issues with it!

I use this fix for the "Apostrophe Bug"
https://vborg.vbsupport.ru/showpost....postcount=1624

and I have the same problem with the edit field. But when I apply your Fix it doesn't work :-/

>> thisgeek : thanks works great

[rogersnm]

you can get the new version which has no bugs and lower server intensity over at vBH read my sig

[Renmiri]

How come the RPG Inferno (lite) battles don't use AJAX ? Does the full Inferno have it ?

In an active forum this turn based system is soooo slow! Real battles are not turn based..

[rb290]

i seen on some forums that shoutbox doesnt appear until you register,
can anyone tell me how this could be done ?