v3 Articles 1.0.1 - [vB 3.0.1]

v3 Articles 1.0.1

By John Warwick, Web Development Freelancer (john@eovieinteractive.com)
Fully tested and working on vBulletin 3.0.1.
Part of www.v3arcade.com

Important Security Fix - Please download v3 Articles 1.0.2.zip
---
If you are upgrading, please read Security Fix Upgrade.txt
If you are installing for the first time, read Instructions.txt

INTRODUCTION
v3 Articles was originally written for the fine people at www.DodgeTalk.com, for use with their vBulletin forum. The purpose of this add-on is to provide a place in vBulletin for articles (e.g. news, reviews, editorials) similar to that of the thread interface - but with a more content-oriented approach.

Features:
- Usergroup based permissions
- Full editing/deletion/moderation system
- Article attachments
- Article ratings
- Comments system
- "Featured Article" system, give great articles top exposure
- Introduction and category description text
- Smilies and icons
- Full BBCODE/WYSIWYG support
- Attachment captions
- Full page navigation for articles and comments
- Comment dupe checking
- Status icons
- View users' ratings in their comments

Alternatively, check the screenshots!

I've tried to make the installation as quick and painless as possible. Enjoy!


WORKING DEMO
You can see a working demo of v3 Articles at www.v3articles.com. (Part of the v3 Arcade website.)


MANY THANKS
- Ron Wilson, of DodgeTalk.com
- Everyone on v3Arcade.com who donated to keep the server running


SUPPORT
Support can be found in the v3 Articles thread on vBulletin.org, and shortly on v3arcade.com. (I'll set up a priority support system.) As always, I'll happily give support for real problems. However, a lot of the time people ask questions about things which have already been answered hundreds of times. If you have a problem caused by not reading through the instructions or checking through the support thread, I can't guarantee a response.


DONATIONS
v3 Articles is free, but my server isn't! Any donations are hugely appreciated in order to help me keep my v3 sites running. (PayPal: john@eovie.com). Many thanks to those who donate!
If you're looking for someone to install v3 Articles for you, email me at john@eovieinteractive.com.


PLEASE CLICK INSTALL
Needless to say, if you install this please click the "Install" button. Thanks.

[bold]

Originally Posted by Zorobz

thanks pingme
any side notes? fixes i would need for it?

too many. i just uninstalled mine.

[Guy G]

Originally Posted by bold

too many. i just uninstalled mine.

but this is critical for meh...
why did u uninstall it? what bugs ect was there that it was so unbareable?

[bold]

Originally Posted by Zorobz

but this is critical for meh...
why did u uninstall it? what bugs ect was there that it was so unbareable?

they list them in this thread. i just found it easier making a new forum and posting articles there.

[Guy G]

but than i loose many featurs of the hack... did u use 3.0.3 btw?

[Qwest]

Originally Posted by deathemperor

well why don't you just edit it like the instrucstion ? isn't it very simple ?

I don't think John knows this already, if yes he should have given a official fix.

or maybe we should email him.

Sounds good. Let's just leave it like this for others to download and get their boards hacked too.

Great idea...

[deathemperor]

Originally Posted by Qwest

Sounds good. Let's just leave it like this for others to download and get their boards hacked too.

Great idea...

don't tell me that you can't see the fix note, eh ?
you think that someone is able to re-release the package that only John can ?
no, no one can, mate

[Paul M]

Originally Posted by deathemperor

don't tell me that you can't see the fix note, eh ?
you think that someone is able to re-release the package that only John can ?
no, no one can, mate

The "fix" note only addresses one small part of the problem, it requires a number of changes to plug all the holes.

[deathemperor]

Originally Posted by Pitman

if (!$permissions['articlepermissions'] & CANFEATURE)

There are a few in there that are right though, hopefully he will release a new version soon.

WRONG, if it's only if (!$permissions['articlepermissions'] & CANFEATURE) then this is totally incorrect, it is never going to work, it MUST be: if (!($permissions['articlepermissions'] & CANFEATURE))

I've spent half a day to fix all issues by myself and fortunately yet disappointedly I found alot of bugs. It looks like this hack was coded very carelessly and uncompleted. and I wonder why this could be a HoTM (!?!)

this is a fix done by me, I don't know if there're still any but without these any board installed this can terribly be hacked I believe.

[KTBleeding]

Originally Posted by deathemperor

WRONG, if it's only if (!$permissions['articlepermissions'] & CANFEATURE) then this is totally incorrect, it is never going to work, it MUST be: if (!($permissions['articlepermissions'] & CANFEATURE))

I've spent half a day to fix all issues by myself and fortunately yet disappointedly I found alot of bugs. It looks like this hack was coded very carelessly and uncompleted. and I wonder why this could be a HoTM (!?!)

this is a fix done by me, I don't know if there're still any but without these any board installed this can terribly be hacked I believe.

Awesome!

One problem though. I can't find this at all:

FIND IN article_display:
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
<if condition="(($article['articleuserid'] == $bbuserinfo['userid']) AND ($permissions['articlepermissions'] & CANEDOWNART)) OR (($article['articleuserid'] != $bbuserinfo['userid']) AND ($permissions['articlepermissions'] & CANEDOTHART))">
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

This is the closest one to it I could find:

<if condition="(($article['articleuserid'] == $bbuserinfo['userid']) AND ($permissions['articlepermissions'] & CANEDOWNART)) OR ($permissions['articlepermissions'] & CANEDOTHART)

Is that the one you're talking about?

PS: Thanks for updating us with a more secure script.

[Guy G]

Database error in vBulletin 3.0.3:

Invalid SQL: SELECT articlepost.*, article.categoryid FROM vb3_articlepost
									  INNER JOIN vb3_article AS article ON (article.articleid = articlepost.articleid)
									  WHERE articlepost.postid=17
mysql error: Unknown table 'articlepost'

mysql error number: 1051

getting error when trying to edit a comment... any ideas pleasE?