Major Additions - DownloadsII

DownloadsII

DownloadsII is a download database that integrates into vBulletin. It allows you to upload files, add images to them, create categories, link to external files - and more. It is very flexible and has many options.

It's also coded 100% XHTML 1.0 Transitional valid, just like vBulletin itself.



Instructions & Support

Requires vBulletin 4.0.4 or higher. Not fully compatible with lower vB 4 versions.
It works fine with both the new editor in vB 4.1.4 or higher and the old one in previous vB versions.

Read the instructions in the next two posts before installing/upgrading this mod!

You can find an installation/upgrade manual in the zip package (Readme.txt).

I try to answer most questions asked in this thread. Please don't send any pm's if I don't ask for them. Don't forget to click the install link, so you will receive important update notifications.

Screenshots & Live demo

At the bottom of this post, you can find some screenshots of the front-end and back-end (AdminCP part) of the DownloadsII software.

You can find a live demo on my own site: Minatica.be Downloads (Dutch).
Though keep in mind that we are running a restyled and modified version of it.

Changelog (version 6.0.9)

Jelle

• Added support for vB 4.1.8 bit processing with 'each' construct (backwards compatible)
• Fixed comma listing for vB 4.1.8 (using "old" method)

Older changelogs are included in the zip package.

Help!!! I can't upload large files??

This is probably the most asked question. It's mostly caused by some default PHP settings: check "PHP Max Post Size" and "PHP Maximum Upload Size" at your AdminCP home.

Then have a look at this post for the solution to up these values.
Also have a look at this post at vB.com (but ignore the MySQL part as DownloadsII is only using the file system).

Add-ons

There are currently no official add-ons. Unofficial add-ons are listed below.

[linuxbaby]

Originally Posted by squidsk

Its all possible but would require customizing the mod, as currently there's no "version" field in the database, so before a version was entered in the display it would first need a field in the database.

thanks for the quick reply.

you know a way to insert my "dreamword version" at first in a database field?

It is important for our forum.
Please help.

Best regards,
linuxbaby

[squidsk]

Its not as easy as just adding a field to the database, which is simple, the query would be something like:

alter table dl2_files add column version int not null default 1

But once that's done all the code needs to be changed to add a version field to the page so that one can be entered and then you need to modify the code so that the version is written to the database. After that you need to modify the pages to read the version information and display it to the screen.

It might sound simple but there's a fair bit of work involved.

[linuxbaby]

Thank you for the reply :up:

i have to test it but my school is not good enough to know what you mean.

alter table dl2_files add column version int not null default 1

Maybe it is in the next version of downloadsII a field with the name "version"?

Best regards from germany,
linuxbaby

[squidsk]

Two bugs to report.

First bug comes with a feature request. The bug is the security token bug, but different from what others have described. Here's how to reproduce the bug. First guests have download permissions. Second have your site open in two different windows/tabs, one of which points to a download the other to any page what so ever. Either be logged in on both or logged out on both, it doesn't matter. If on the non-download page you log out, or log in, and then try to download the file from the download page without refreshing you'll get a security token error. The request that goes along with this, is to remove the security token from the url of the download button and have downloads.php grab it from the $vbulletin after the download button is clicked, as that should stop all security token issues. It would also prevent security token errors when a user posts a link directly to the download button and others try to follow it, which of course won't work as the security tokens would be different.

EDIT: This bug can be reproduced as well by logging in with a second account, the guest account does not necessarily required download permissions.

Second bug. If a file does not exist in the download directory, but a entry points to it, you do not get a vbulletin error message, but just a plain php message. The block of code in question is at line 754 in version 6.0.9. Wrapping that code in an if(file_exists($dlfilename)) would probably solve the problem.

EDIT 2: Both bugs are present in both 5.1.2 and 6.0.9.

[Hippy]

Originally Posted by squidsk

Two bugs to report.

First bug comes with a feature request. The bug is the security token bug, but different from what others have described. Here's how to reproduce the bug. First guests have download permissions. Second have your site open in two different windows/tabs, one of which points to a download the other to any page what so ever. Either be logged in on both or logged out on both, it doesn't matter. If on the non-download page you log out, or log in, and then try to download the file from the download page without refreshing you'll get a security token error. The request that goes along with this, is to remove the security token from the url of the download button and have downloads.php grab it from the $vbulletin after the download button is clicked, as that should stop all security token issues. It would also prevent security token errors when a user posts a link directly to the download button and others try to follow it, which of course won't work as the security tokens would be different.

EDIT: This bug can be reproduced as well by logging in with a second account, the guest account does not necessarily required download permissions.

Second bug. If a file does not exist in the download directory, but a entry points to it, you do not get a vbulletin error message, but just a plain php message. The block of code in question is at line 754 in version 6.0.9. Wrapping that code in an if(file_exists($dlfilename)) would probably solve the problem.

I luv bug fixes .. is there any thing other than to wrap that code you posted ?
did you test it again..

thansk for the post:up:

[otttto]

frome Post 1775.

Info

All download links are missing from the downloads.
( i see in Edit Download / Link Field )
Only the links that are inserted from the outside there.
All of the files I uploaded are no link when I go to Edit Download.

Best regards Otttto

[squidsk]

Originally Posted by Hippy

I luv bug fixes .. is there any thing other than to wrap that code you posted ?
did you test it again..

thansk for the post:up:

I was actually slightly mistaken about the second bug. It isn't a php error I'm getting but rather the intentional error of the plugin. Its just creating a simple blank page instead of using a vbulletin error page. It would be nice if this was fixed so that if the file doesn't exist it displays a standard vbulletin error message. The line that would need to be fixed is link 672, and there's another instance of that type of page at 667 if the filename is the empty string.

As for the first bug, I realized after giving it some thought that it isn't actually a bug, but rather how things are supposed to work to deal with the CSRF issue mentioned here.

Which leads me to a slightly modified request for improvement, in two parts. First improvement, can the act & and actionhash be converted from get to post type parameters for the page, this would at least eliminate the second problem of people linking to the download button's link. The second improvement would be to not include the download function in those requiring the session token, the reason being that if someone forced a download it would not have any adverse affect on the downloads table, the most it does is increment the number of downloads a user has and the number of times a particular file has been downloaded, especially if you have your extensions setup correctly. The upload and delete functions should of course absolutely require the action hash.

A third improvement request, could the report function be linked into the standard vbulletin reports so that threads are created in whatever forum was setup to post other reports to?

[Alfa1]

I am running LDM on my site. In the past I have not considered DII as LDM was more advanced. I wonder how DII has evolved over the years. Is it comparable to LDM now or even better?

Is there a changelog somewhere?

Is there an import script from LDM to DownloadsII?

What integration features does DII have?

[Hippy]

@squidsk I will second those requests

thanks for the reply ...

[squidsk]

Just for people to know how I've fixed the non-existent file page. It took 2 steps.

1) Create a new phrase as per the image:



2) Changed the code on line 672 as follows:

from

PHP Code:

echo "<html><head><title>DownloadsII Error</title></head><body>ERROR: File not found.</body></html>"; 


to

PHP Code:

eval(standard_error(fetch_error('dl2_file_not_found', 'downloads.php?do=report&fileid=' . $file['id']))); 


A similar phrase and code replacement will also work for when the filename is the empty string.