Miscellaneous Hacks - CES Parser Permissions

CES Parser Permissions
vBulletin 3.6.x, 3.7.x, 3.8.x, 4.0.x supported
Version: 2.2.3

If you encounter what you think may be a bug, please include your vBulletin version number when reporting it, since code and fixes differ greatly from 3.6.4 - 3.8.x.

*** NEWS ***
11/8/2010 - 2.2.3 released
5/15/2010 - 2.2.2 released
4/12/2009 - 3.6.x thread separated

Known Issues:
- If you are using the Advanced BB-Code Permissions hack, conflicts can arise when profile fields are parsed in the postbit, causing nothing be parsed. The fix is described here: https://vborg.vbsupport.ru/showthread.php?p=1252480

What It Does:
Allows you to grant only certain usergroups the ability to use HTML, BB-code, smilies, and IMG-code in their profile fields, posts, PMs, and in Project Tools.

Mod Features:
- parse profile fields on user profiles using Usergroup Permissions
- parse profile fields in postbits using Usergroup Permissions
- parse posts using Usergroup Permissions
- parse calendar events using Usergroup Permissions
- parse private messages using Usergroup Permissions
- parse Project Tools issues and replies using Usergroup Permissions
- parse Social Messages and usernotes using Usergroup Permissions
- complete Forum Rules integration
- disallow certain HTML tags

Products to Install: 1
Files to Upload: 3
Files to Edit: 0
Template Edits: 0

*** Changelog ***
As of Version 2.2.3

• non-forum messages don't parse
• poll options don't parse

As of Version 2.2.2

• several bug fixes
• compatible with VaultWiki 2.5.7 PL 1 & 3.0.0 RC 3

* This mod is offered for free here. Please donate if you like this mod *

[thincom2000]

Okay I have fixed this on the dev version. The problem was that $forumid wasn't getting passed through the function. To fix it temporarily on your site, you can add $forumid to the argument list for the function call in the bbcode_parse_start plugin. The code should be:

PHP Code:

$text = ces_permissions_parse($this, $text, $forumid, $dosmilies, $dobbcode, $dobbimagecode, $dohtml); 


In includes/ces_permissions.php, find:

PHP Code:

function ces_permissions_parse(&$parser, $text, $dosmilies, $dobbcode, $dobbimagecode, $dohtml) 


Replace with:

PHP Code:

function ces_permissions_parse(&$parser, $text, $forumid, &$dosmilies, &$dobbcode, &$dobbimagecode, &$dohtml) 


The fact that none of the "do" vars were not passed by reference before means that no vB functionality was broken, but that basically this mod did nothing. Apply this fix and it should be working. I will upload a new patch as soon as I fix the Quick Edit bug.

[nerofix]

Hello thincom,

I just installed the 2.0.1 and it's still not parsing [IMG] code in profile fields or visitor messages. I'm tinking about if something else is blocking this, but it's the first time I use your mod, so I'm not sure if it's meant to work there.

Please confirm that Posts and postbits are parsing correctly.

Where should I look, or better, what exactly should I do to test.
I also have project tools installed and of course your special xml therefor. (Just for info, don't know if it's important for you to know that).


Edit: I also got a 3.6.5 board, after installing CES_parser I get a database error when I go to the profiles:

Invalid SQL:

SELECT COUNT(*) AS count
FROM infraction AS infraction
LEFT JOIN post AS post ON (infraction.postid = post.postid)
LEFT JOIN thread AS thread ON (post.threadid = thread.threadid)
WHERE infraction.userid =;

MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 5


Perhaps this could help you too.

[thincom2000]

Okay, as [IMG] code seems to be the only malfunctioning code on your board, it would appear that vBulletin is hardcoded in some way to circumvent its use on the profile. I will see if there is a possible workaround for this.

I will also look at the 3.6.5 member.php to see why that may occur, although I know these permissions don't touch infractions at all. At first glance, it looks like $userinfo might be cleared for some reason.

[nerofix]

Okay sorry, but I got 2 more things in 3.7

The inline-edit in about me doesnt show up anymore (which is less important)

.. but I have a major problem: when posting a visitor message on foreign profiles, the message is showing up in my profile only .. can you reproduce this?

Sorry to report you so many things, but I'd really like to help you and get your mod working because I've waited for a mod like yours. =)

[thincom2000]

Originally Posted by nerofix

The inline-edit in about me doesnt show up anymore (which is less important)

Sorry but I am not experiencing this issue.

Originally Posted by nerofix

I have a major problem: when posting a visitor message on foreign profiles, the message is showing up in my profile only .. can you reproduce this?

I can think of a possible cause for this without looking at the code, but I probably won't be able to look into this until tomorrow.

Originally Posted by nerofix

Sorry to report you so many things, but I'd really like to help you and get your mod working because I've waited for a mod like yours. =)

Thanks for that. I actually prefer more bug reports because I like being able to list a lot of things in the changelog between versions

[thincom2000]

Originally Posted by nerofix

I have a major problem: when posting a visitor message on foreign profiles, the message is showing up in my profile only .. can you reproduce this?

I haven't tested this, but just thought of it while I was out.

In includes/ces_permissions.php, find:

PHP Code:

global $vbulletin, $post, $userinfo, $nuwiki; 


Replace with:

PHP Code:

global $vbulletin, $post; 


That may even solve the 3.6.5 DB error. But then again I just thought of this a few minutes ago.

[Thug]

i get a blank white profile page after install for vbulletin 3.7 beta 4

[thincom2000]

Did you try the solution in my last post?

[cheesegrits]

Originally Posted by thincom2000

Well I promised a new version a few months back, and rather than wait for 3.7 to go GOLD, I thought I would give everyone a Presidents' Day present.

This mod has been completely rewritten for the pending release of vBulletin 3.7.0. Permissions are now faster and more reliable. It is much easier for other coders to add support for their own mods or new vBulletin products.

Ah, I was wondering about that. I was working on a hack last week to provide an HTML-enabled "About Me / Home Page" tab on the profile (replacing the default About Me), and it took a while to work how how the heck the $bbfoo variables I was setting were getting blown away! I presume handling of that stuff in bbcode_parse_start is what you mean by that last sentence. I'll load the new version this week and have another go at it.

cheesegrits directed me to HTMLPurifier in order to integrate it into this mod. This has been flagged for the next version.

The hack I mentioned above is basically a test for the HTMLpurifier. They've now added semi-sensible support for CSS as well, with the ability to restrict the scope of any CSS directives to a specific block ID. So far it's looking good. The cleaning process is pretty intense, lots of memory and CPU, and on larger sites I'm not sure it would be workable for common things like forum posts ... but for stuff like profiles, I think it's a winner.

My only real concern about using HTMLpurifier is convincing people who install it to keep it updated. All we can really do is put a big note in the mod description reminding people how important it is to mark the product "installed" so they can be informed of any security updates.

-- hugh

[Thug]

Originally Posted by thincom2000

I haven't tested this, but just thought of it while I was out.

In includes/ces_permissions.php, find:

PHP Code:

global $vbulletin, $post, $userinfo, $nuwiki; 


Replace with:

PHP Code:

global $vbulletin, $post; 


That may even solve the 3.6.5 DB error. But then again I just thought of this a few minutes ago.

Yes thincom2000 i treid this. blank profile page still.