BB Code Enhancements - BB Code (flash animations .swf)

What does it do?
This BB Code allowes to insert .swf animations into your posts or user's signatures.
When you click on "F" button (see zip file) you have to do this:
1.- Enter height and width values (see screenshot 1)
2.- Enter your .swf URL (see screenshot 2)
3.- That's all !!

Demo
http://www.seusers.com/foro/142266-post20.html (Signature)

Works with vb 3.8.x??
Yes

How to install?
Upload image form zip file.

Goto AdminCp->Custom BB Codes->Add new BB Code

Title: Flash BB Code
BB Code Tag Name : swf
Replacement:

<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=8,0,0,0" {option} id="Untitled-1" align="middle">
<param name="allowScriptAccess" value="sameDomain" />
<param name="movie" value="{param}" />
<param name="quality" value="high" />
<param name="bgcolor" value="#ffffff" />
<param name="wmode" value="transparent">
<param name="menu" value="false"/>
<embed src="{param}" quality="high" bgcolor="#ffffff" {option} wmode="transparent" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="Adobe - Adobe Flash Player" />
</object>


Example: [swf="height=100 width=400"]http://www.seusers.com/intro.swf[/swf]
Description: This BB Code allowes to insert .swf animations into your posts or user's signatures.
Use {option}: Yes
Button Image (Optional) : Upload from zip file to /images/editor or /your_style/images/editor if you are not using vbulletin default style.
Remove Tag If Empty: Yes
Disable BB Code Within This BB Code: No
Disable Smilies Within This BB Code: No
Disable Word Wrapping Within This BB Code: No (Not available in 3.8.x or lower, just omit it)
Disable Automatic Link Parsing Within This BB Code: Yes (Not available in 3.8.x or lower, just omit it)

History

• 1.0 Release
• 1.1 Fixed some code. Now working with vb 3.8.x and 4.0.3

[saadessa]

thank you i will try it

[GreenKman]

This is worse than letting someone use HTML in their signature. Imagine how quickly somebody could spread a virus, considering how big said person's forum is.

[SEW810]

Oh my God!, maybe I should uninstall ads on my forum, because they are using almost the same code.

C´mon people, swf files are just animations, just like youtoube embebed videos, flv videos. How come do you attach a virus on an animation?.

Best regards

[TimberFloorAu]

I Suppose a swf can contain malicious code.

http://www.sophos.com/security/analy...swflfm926.html

[SEW810]

yeah, specially if you execute it /open it manually.
NEVER a swf animation executed on a web page will interact with your hard disk files, Macromedia has implemented policies to avoid this kind of actions

In testing Sophos has confirmed the Macromedia Flash element of the virus works when the SWF file is manually downloaded from an affected website and opened using the Macromedia Flash player.

Interesting, it says something about interact with a program INSTALLED in your har disk, oh and dowload that file... oh yeah, I got it, "virus attack if I DOWNLOAD an swf file, save it on My Documents or something and then I open it" .... Jesus, what's that for??, did you forget that you were surffing the internet and visiting a forum? ?? Don't do experiments if you don't know what you are doing.

Sophos recommends webmasters put in place procedures and policies to ensure the integrity of the code they place on their websites, whether it be obviously executable (in the case of, for instance, EXE and COM files) or Macromedia Flash movies.

Totally inofesive that code, I repeat, is the same code used on http://www.msn.com/ at Advertisement, or at http://www.nfl.com/ or any site with flash animations.

Please people, don't worry... be happy

If you don't want to take "the risk", please just don't install it.
Sharing this bb code wont help me to hack your site or get your bank account PIN or something.

[syrus.xl]

This is one of the biggest security holes I have seen on here yet!!!! Allowing HTML, is one thing, but a SWF is totally different.

Yes, it could be used for pretty animations in signatures, but it can also be used for malicious purposes. Okay, many companies use flash adverts, but these are designed by professional flash authors who do not place actionscript in SWF files for other purposes.

SWF files do not need to be downloaded to your PC to infect it (You are correct on that remark!), with SWF's it's done on a much larger scale. SWF files can easily be coded to do call-backs, cause re-directs and much more.

Please people, don't worry... be happy

People will not be happy when they lose their forums because of a modification, that has opened up their vBulletin to attacks.

I cannot see this modification being allowed to stay on vbulletin.org when it is such a high security risk to any forum!

It would not be too bad if it was Usergroup specific, but it is not even that.

[SEW810]

Originally Posted by Dr.osamA

hhhhhhhhhhhhhhhhhhh

i love you man looooooooooool

by the way i just installed it but not working
i thing i do mistake anywhere

plzz SEW810 help me with this

try it in my site
http://www.alra7ba.net/vb/showthread...68266&langid=1

user : vBulletin
pw = 123456

thanx agen man

Man, for security reasons, please change password and MP the new one.
I can see you are using another swf bb code. Maybe the other ones is creating conflict.

[SEW810]

I see, your bb code Replacement stuff is wrong man, you have something like this:

<EMBED src={option} quality=high loop=true menu=false {param} TYPE="application/x-shockwave-flash"</EMBED>

Please, copy and paste just like this:

<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/s...ersion=7,0,0,0" {option} id="Untitled-1" align="middle">
<param name="allowScriptAccess" value="sameDomain" />
<param name="movie" value="{param}" />
<param name="quality" value="high" />
<param name="bgcolor" value="#ffffff" />
<param name="wmode" value="transparent">
<param name="menu" value="false"/>
<embed src="{param}" quality="high" bgcolor="#ffffff" {option} wmode="transparent" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="Adobe - Adobe Flash Player" />
</object>

... or switch {option} and {param}

If you need help, you can make a temporary admin account and MP me user name and password, so I could take a look.
Regards

[w-elbalad.com]

thanks
but why flash is small
and i dont have choise to change px