The Arcive of Official vBulletin Modifications Site.

AnyMedia BBCode for 3.5.x · **Released**: 01-23-2006

###############################
# Jun.7th, 2006 17:00 GMT+8 #
# AnyMedia BBCode 3.0.4 Release #
###############################

@ Overview
---------------------------------
Products to Import: 1
Template Modifications: 4
File to Upload: 7 (2 swf, 1 gif, 3 php, 1 js)

@ Description
---------------------------------
Use only ONE bbcode to post almost 60 kinds of file,
and flash videos from more than 10 sites.

@ Credits
---------------------------------
Author of the Hack -- Crist Chsu
Author of Flash Single MP3 Player -- Jeroenwijering.COM
Author of Flash Video Player -- Jeroenwijering.COM
Author of PHP BEncode Library -- Gerard Krijgsman
Special thanks to Andreas's great suggestion, which made the mod become a plugin.

@ Translations
---------------------------------
Simplified Chinese by Crist Chsu (http://www.QuChao.com)
Traditional Chinese by Crist Chsu (http://www.QuChao.com)
German by Oberguru (http://www.webgurus.de)
Arabic by Coffee (http://www.shinqit.net)
Hebrew by Dacho (http://www.dacho.co.il)
Italian by Fulvio di Stefano (http://www.internetdiffusion.com)

@ Supported Extensions
---------------------------------
Adobe Flash:
swf, spl, flv

Quick Time:
mov, qt, mqv, mpeg, mpg, m1s, m1v, m1a, m75, m15, mp2, mpm, mpv, mpa, flc, fli, cel, rtsp, rts, 3gp, 3gpp, 3g2, 3gp2, sdv, amc, mp4, sdp

Real Media:
rm, rmvb, ra, rv, ram, smil

Windows Media:
mp3, wma, wav, ogg, ape, mid, midi, asf, asx, wm, wmv, wsx, wax, wvx, avi

Adobe PDF:
pdf, fdf, xfdf, xdp, xfd

Image File:
gif, jpg, jpeg, bmp, png, xpm

P2P File:
torrent, emule, foxy, pplive

@ Supported Flash Video Sites
---------------------------------
Google (http://video.google.com/)
Youtube (http://www.youtube.com/)
vSocial (http://www.vsocial.com/)
iFilm (http://www.ifilm.com/)
MetaCafe (http://www.metacafe.com/)
DailyMotion (http://www.dailymotion.com/video/)
CurrentTV (http://www.current.tv/studio/)
Vimeo (http://www.vimeo.com/)
Sharkle (http://www.sharkle.com/video/)
FreeVideoBlog (http://video.freevideoblog.com/)
MyVideoDe (http://www.myvideo.de/)

@ Features
---------------------------------
You're allowed to ...
1. Custom the tag name;
2. Custom the title of the player;
3. Decide which usergroup could see the download link;
4. Use Flash Single Mp3 Player to play the mp3 file;
5. Custom the width & height of the media;
6. Decide whether to make the media autostart by default;
7. Decide whether to collapse the player box by default;
8. Play the Google Videos via proxy;
9. Auto-detect the attachment type;
10. Use AnyMedia player to play attachments;
11. Custom the default value of loop;
12. Filter the AnyMedia BBCodes in Quote tags;
13. Choose which extension could be supported;
14. Choose whether to use AnyMedia Player or not for each supported video site;

@ How to Use
---------------------------------
Tag without options:
[MEDIA]url_of_the_file[/MEDIA]

ex.
[MEDIA]http://server/file.mp3[/MEDIA]
Shown as a mp3 player (Use the flash mp3 player by default).

Tag with options:
[MEDIA="width, height, autostart, loop, extension"]url_of_the_file[/MEDIA]
[MEDIA="width, height, autostart, loop"]url_of_the_file[/MEDIA]
[MEDIA="width, height, autostart"]url_of_the_file[/MEDIA]
[MEDIA="width, height"]url_of_the_file[/MEDIA]

ex.
[MEDIA="300,380,yes,2,rm"]http://server/file.mp3[/MEDIA]
It will use the real player to play the file.mp3,
the object is 300px width, 380px height,
it will autostart and will repeat for twice.

[MEDIA=250,150,0,3]http://server/file.flv[/MEDIA]
It will use the flash player to play the file.flv,
the object is 250px width, 150px height,
it'll NOT autostart but will repeat for 3 times.

[MEDIA=400,480,false]http://server/file.swf[/MEDIA]
It will use the flash player to play the file.swf,
the object is 400px width, 480px height,
and it'll NOT autostart.

[MEDIA=421,211]http://server/file.pdf[/MEDIA]
It will post the pdf object on the page,
the object is 421px width, 211px height.

Other Rules:
1.WIDTH and HEIGHT are both required if you want to add options；
2.Available values for the AUTOSTART option: 1, true & yes.
3.Separate the options with commas.

@ Change Logs
---------------------------------
[1.1.0]
[BUG] Hide the "download link" will show a warning
[NEW] Usergroup Permission Restriction

[1.2.0]
[DEL] Codes Modifications (Thanks to Andreas's suggestion)
[CHG] Allow every group to use anymedia by default
[NEW] Cache the Templates

[1.3.0]
[CHG] Use Google Video Player to play the Google's.
[NEW] Allow to play the wsx, wav and the flv files from google, youtube, vsocial .
[NEW] Allow you to custom the tag name.
[NEW] Allow you to set the title for the player box.
[NEW] Allow you to collapse the player box by default.
[BUG] Playing a WMV file with no pictures.

[2.0.0]
[CHG] Change the method of loading, Fix the "Bug" that long loading.
[NEW] "Fix" the 'Activating Active Content' issues in the new IE Update. （It means that, if you've installed the new IE update, there's no need to Click the media object before you want to play it

）

[2.1.0]
[BUG] Fix the bug that cannot autoplay a wmv (& etc.) file.
[BUG] Fix the bug that when custom the video size of google/youtube/vsocial will get a non-supportted error.
[NEW] Let you to choose whether to play a google video through a proxy. It's useful for Chinese users.

[2.2.0]
[BUG] Fix the bug that cannot autoplay a wmv on Firefox.
[BUG] Fix the bug that auto play a google/youtube/vsocial video when disable it.

[2.3.0]
[BUG] Fix a tiny bug with bt parsing.
[NEW] Support the attachments from your own forum, and you could switch it off.

[3.0.0]
[CHG] Rebuild the code of the whole AnyMedia.
[CHG] Use flvplayer to play Google Video again.
[BUG] Fix the bug that error with parsing when allow_url_fopen's off.
[BUG] Fix a bug with url parsing.
[BUG] Fix the parsing error of youtube video.
[NEW] eMule & foxy types added.
[NEW] loop option added.
[NEW] Use AnyMedia Player to play the attachment when upload one.
[NEW] 8 More flash video sites supported.
[NEW] Chinese versions added.

[3.0.1]
[BUG] Fixed the bug that cannot autoplay a wmv (& etc.) file.
[BUG] Fixed the bug that always insert a tag named [media].
[CHG] Hide AnyMedia button in editor when disable it.
[CHG] Hide AnyMedia Player for unsupported attachment.
[NEW] Multi-Language Documents added. It will auto-detect the language when you open it.
[LAN] German version by Oberguru (http://www.webgurus.de) added.
[LAN] Arabic version by Coffee (http://shinqit.net) added.

[3.0.2]
[BUG] Fixed the bug that cannot disable extensions in admincp .
[BUG] Fixed the bug with youtube playing session.
[CHG] Used a special player to play youtube video.
[NEW] Added an option to switch the youtube video playing method.
[NEW] You could use 'Ctrl + wheel' to resize the image now.
[NEW] New option added in admincp, you could choose whether to disable AnyMedia BBCode in Quote tags.

[3.0.3]
[BUG] Fixed the bug with mp3's (flash player) autoplay issue.
[BUG] Fixed the bug with flv's autoplay issue.
[BUG] Fixed the bug with 3gp files' parsing error.
[BUG] Fixed the bug with iamges' resize issue.
[BUG] Fixed the bug with attachments' autoplay issue.
[NEW] Support the latest Google Movie Preview (http://video.google.com/movietrailers.html).
[LAN] Hebrew version by Dacho (http://www.dacho.co.il) added.

[3.0.4]
[BUG] Get Google Video back to work again.
[NEW] PPLive supported. You could watch the World Cup Live on your board with your members now. Which team will be the biggest winner this time? :banana: (It can only work with IE, sigh...:surprised: )
[NEW] New option group added in admincp, you could choose whether to use build-in player for each supported sites.

@ Frequently Asked Questions
---------------------------------
Q: I got white screen when playing a google video.
A: AnyMedia fetch the correct video url, but there's sth wrong with the flvplayer.swf, try to refresh the page to solve it.

Q: When using mp3player.swf to play mp3, it's played fast/slowly.
A: Flash doesn't support vbr (variable bit rate) mp3 files.It only support a mp3 with a fixed bitrate of 64/96/128 kbps ,a sample frequency of 22.05kHz and joint stereo. To solve it, turn the option off in admincp to make it be played by WMP.

Q: I have to click play button twice to play a google video.
A: Emmm... Even using the google player, you also have to click twice. I don't know why, and I'm trying to fixed it. If you know, just tell me.

Q: The supported extensions checkbox are always unchecked even if I check them all.
A: The permission cache is not updated. Overwrite the 'includes/xml/bitfield_anymedia.xml' file, and log into your admincp to visit 'admincp/index.php?do=buildbitfields' to rebuild the permission cache.

Q: When I use build-in player to play Youtube, it will be loading all the time.
A: To use the build-in player to play Youtube videos, your server have to enable the 'allow_url_fopen' option, or enable the 'fsockopen / curl_init' functions. If failed, turn the 'Use AnyMedia Player for Youtube Video' option off in admincp.

Q: I cannot get the PPLive working with my Firefox or etc.
A: As far as I know, the pplive object can only work with IE. And if you know how to embed it on FireFox, just tell me.

@ Todo
---------------------------------
1. Add a Playlist.
2. Integrate it with CMPS, Link & Download Sys, and etc.
3. read ID3 tag.

@ Notes
---------------------------------
1. We need other translations, if you made one, just PM me.

If you like the hack, Please click

.

I DO NOT know whether I should update the hack.
I'm not a coder of vBulletin-Chinese Team now, as I left there weeks ago.
Sorry about this, and I'll tell you how the update's going if it's really on the way.

nix · #**1502** 08-22-2006, 11:19 PM

Quote:

Originally Posted by jeremycs

Where exactly are the installation instructions?

I don't see anything that looks like install instructions.

There is an "install.htm" but it contains references to VB paths & there is no explanation on how to use this file.

Whn I unzip there are simply 3 directories:

do_not_upload
import
upload

in do_not_upload, the only thing that resembles instructions is the "install.htm" mentioned above.

Is there a readme file missing or something?

do the file edits in the install.htm

jeremycs · #**1503** 08-22-2006, 11:38 PM

VERY SORRY...

.... the mozilla noscript extention was blocking the install.htm file from loading properly.

jeremycs · #**1504** 08-23-2006, 01:35 AM

Anyone know the quickest way to disable autoplay / autostart (even if users enables it in the MEDIA tags) ?

Is it possible to hardcode a value of 0 / no / false somewhere for the autoplay value?

Maybe something around here in includes/class_anymedia.php?

PHP Code:


			
 var $_mediaInfo = array(
                'width' => 0,
                'height' => 0,
               'autoplay' => '',
                'extension' => '',
                'loop' => 0,
                'url' => '',
                'link' => '',
                'mime' => '',
                'type' => '',
                'id' => 0,
                'layout' => 0,
                'extra' => array()
        );

Or maybe it would just be easier to strip the media tag flags when they are submitted (if you're worried about getting thread-DOS'ed via autoplay)

phkk · #**1505** 08-23-2006, 03:01 AM

Quote:

Originally Posted by nix

I just changed my google section in class_anymedia.php to this.

PHP Code:


			
//    {{{    google()



    /**

     * Google Video.

     * @param    array    media info array

     */

    function google(& $mediaArray)

    {

        if (preg_match('/docid=([^(\&|$)]*)/i', $this->_mediaInfo['url'], $match) || preg_match('/docid\/([^(\&|$)]*)/i', $this->_mediaInfo['url'], $match) || preg_match('/video_id=([^(\&|$)]*)/i', $this->_mediaInfo['url'], $match)) {

            if(intval($this->vbulletin->bf_misc_anymediaplayer[$mediaArray[1]]) & $this->vbulletin->options['anymediaplayer']) {

                $this->_mediaInfo['url'] = $this->vbulletin->options['bburl'] . '/players/flvplayer.swf?file=' . $match[1] . '&site=youtube&autoStart=' . iif($this->_mediaInfo['autoplay'] == 'true', 'true', 'false');

                $this->_mediaInfo['height'] += 20;

            } else {

                $this->_mediaInfo['url'] = 'http://video.google.com/googleplayer.swf?docid=' . $match[1];

            }

            $this->player($mediaArray);

        } else {

            $this->_mediaInfo['type'] = 'error';

        }

    }



    //    }}}

will this code work for google using anymedia flash player ( not google flash player)

nix · #**1506** 08-23-2006, 03:44 AM

nope.

MajorFm.com · #**1507** 08-23-2006, 08:16 PM

Quote:

Originally Posted by MajorFm.com

Also does anyone know why this happens:

White Screen Instead Of Player - Even Though I Refreshed Again & Again
http://www.majorfm.com/forum/video-v...l-panties.html

but when you view the post on its own:
http://www.majorfm.com/forum/218984-post1.html

Seems to work fine on firefox though....

It works fine... something must be conflicting it on thread view... any suggestions?

I still cannot see em in ie... cannot work it out, on the flash dl site it says:

You have version 8,0,24,0 installed

I'm baffled... can't view it on 4 machines...

its fine in firefox...

any idea people?

thebuckeyeforum · #**1508** 08-26-2006, 04:09 PM

I am good up until the final step. I cannot find the "Anymedia bbcode permissions."

I am looking in the usergroup permissions but do not see it.

Am I missing something?

Mysticales · #**1509** 08-26-2006, 04:15 PM

Maybe redo your bitfield so it updates, Then try.

My concern is.. I am not secure about using this.. seems users could spam flash players all over a thread.. =/ Wonder what everyone does to secure this.

jeremycs · #**1510** 08-26-2006, 04:41 PM

Quote:

Originally Posted by Mysticales

My concern is.. I am not secure about using this.. seems users could spam flash players all over a thread.. =/ Wonder what everyone does to secure this.

There are definitely some security issues to consider when using this module.

#1: Think strongly about allowing macromedia files to be one of the file types that are allowed to play. (ie .swf and the other 2 in that row). It's very easy for someone to construct a .swf that will redirect your member to a url of the .swf authors choosing. Perhaps the site they redirect them to looks just like YOUR sites login page? Making the user think they are logged out and they need to log in again. But instead, the flash author harvests their password & logs them in to your board as if nothing happened.

#2: As mysticales says above, and I have said, and someone else originally said in this thread... there is potential for per-thread denial of service attacks. The attacker would just need to make a few posts and autoplay 20-30 large files.

Suggested fixes:

For #1: There's no fix really, unless your server pulls the submitted .swf or flash file on submission, scans it for anything you consider malicious, and then hosts it locally. Scanning a hotlinked .swf & leaving it that way would do no good because the person could just change the .swf file to something malicious later.

Btw, I'm think the same goes for certain windows media files as well... .asf and .asx I believe.

For #2: Add options to limit things like:

- The number of media tags a user can enter per day
- The number of media tag allowed per thread

And most importantly:

Ignore user-submitted autoplay? (YES) / NO

G_Man · #**1511** 08-26-2006, 11:16 PM

Quote:

Originally Posted by jeremycs

There are definitely some security issues to consider when using this module.

#1: Think strongly about allowing macromedia files to be one of the file types that are allowed to play. (ie .swf and the other 2 in that row). It's very easy for someone to construct a .swf that will redirect your member to a url of the .swf authors choosing. Perhaps the site they redirect them to looks just like YOUR sites login page? Making the user think they are logged out and they need to log in again. But instead, the flash author harvests their password & logs them in to your board as if nothing happened.

#2: As mysticales says above, and I have said, and someone else originally said in this thread... there is potential for per-thread denial of service attacks. The attacker would just need to make a few posts and autoplay 20-30 large files.

Suggested fixes:

For #1: There's no fix really, unless your server pulls the submitted .swf or flash file on submission, scans it for anything you consider malicious, and then hosts it locally. Scanning a hotlinked .swf & leaving it that way would do no good because the person could just change the .swf file to something malicious later.

Btw, I'm think the same goes for certain windows media files as well... .asf and .asx I believe.

For #2: Add options to limit things like:

- The number of media tags a user can enter per day
- The number of media tag allowed per thread

And most importantly:

Ignore user-submitted autoplay? (YES) / NO

Because of concerns like this only Admin/Mods are even allowed to use this on my forum. Still a wonderful addition to the forum though.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.05914 seconds Memory Usage 2,371KB Queries Executed 25 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (2)bbcode_php (5)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)modsystem_post (1)navbar (6)navbar_link (120)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (4)pagenav_pagelinkrel (11)post_thanks_box (11)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (11)post_thanks_postbit_info (10)postbit (11)postbit_onlinestatus (11)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start pagenav_page pagenav_complete tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!