[AJAX] vBShout v2.0

[high]Staff Edit/Update[/high]

I have released an updated version of this hack (version 2.0.1), this version fixes some security issues with this hack. All version prior to this one allow users to insert html in their shouts, this can cause problems with them using html that breaks the site layout or malicious javascript. Download the new zip file (vBshout_fixed.zip) and upload the new vbshout.php file to patch/upgrade. If you want to manual instructions they are in the zip file, in the file bugfixes.txt

Second Staff update

I've uploaded a new version of this hack, dubbed '2.0.2'. This one should fix the html injection issues without breaking special characters. To upgrade, download the new zip file and upload the new vbshout.php file.

Please note that this only fixes the html injection issues. I do not use this hack on my own forum (although I've tested this on a client's board) so I will not be fixing the server load issues. I suggest you do not install this hack if you can't deal with the extra server load, as it's rather intensive.

- Brad

[high]End staff edit[/high]

Well, been a while since I've been to vb.org and released anything, thought i'd break the trend and whip up something quick while I have a little spare time.

A shoutbox as you would assume, a very simple one to start off with, but does include AJAX Technology, which pushes the shoutbox 1 step closer to live, messages from other people will appear with no refreshing, and so will yours that you post

A preview is below, i'd estimate a 50 second installation max

Primary Features:
- AJAX Technology (no refreshing)
- Administration control an display element options
- Fast format editor

Change Log::

- v1.1:
WOL (Who's Online) Correction

- v1.2:
New Posting Featurs (Bold/Italic/Underline/Colour/Font)
Admin Controls

- Change location/position of shoutbox
- Change number of shouts displayed
- Switch vbcode/similes on/off

- v1.3
Firefox javascript issue fixed
New Admin Controls

- Command Activation
- Swtch extra format options on/off
- Change position of editor (above/below messages)

New Commands

- /prune (Clears the shoutbox completely)
- /prune [username] (Clears all shouts posted by specified user)

- v1.4
Usergroup HTML Markup For Usernames
Clear Editor Button
Emoticons Pop Up Menu
Time display configurated to vBulletin settings
Username Links To Profile
New Admin Conrols

New vBShout Position (Directly Above Forums)
Banned Users
Banned Usergroups
Banned Permissions
Smilie Pop-Up Box Height
Smilie Pop-Up Box Width

New Commands

"/me" - Action message (all users are able to use this command)
/pruneshout [shout] - Deletes a single shout

- v1.5
Improved Smilies Display
XHTML 1.0 Transitional Valid (couple of errors fixed)
New Admin Options

Shoutbox Height
Smilies To Show
Shout Messages Order
Banned Permissions (fixed)

- v1.6
Bug Fixes:

- Unable to delete shouts that used /me command fixed
- Shouts being displayed from bottom-upwards only showed first 20 shouts

Automatically parses URL's

- v2.0
New Archive

- Displays shouts and pages
- Stats and top 10 shouters
- AJAX Edit/Delete (staff can edit/delete all shouts)

Enjoy,

- Zero Tolerance

[CrossBones]

Originally Posted by imported_predatorkill

I really dont know if it needs to be refreshed to show the shouts.

I wasnt talking about manual refresh to see the shout,i was talking about the bad window behavior in Safari.

I know. I was just asking whoever if they know if there is anything that makes this work correctly when viewed in Safari! Right now I think it is unusable.

Thank you.

[aky]

how does one turn off the shout box?

[putergirl]

Originally Posted by putergirl

Hello, this shoutbox looks really nice, and it installed like a breeze, but when I try to shout, it never loads the shout and I get the message: "Posting in progress"

What does that mean, and how can I fix it. I don't know a lot about code, so will need some detail. Thank you!

oops, turns out the php hadn't been uploaded.. I could swear I did that.. Love it!! Thanks. :banana:

[CrossBones]

Originally Posted by putergirl

oops, turns out the php hadn't been uploaded.. I could swear I did that.. Love it!! Thanks. :banana:

I'm gettng that "posting in progress" too. Clould thqat be my "safari" problem? So that means that the host php hasn't been updated? What should the current php version be?

[Kiros72]

No, posting in progress means simply that. I've gotten this message before while using Avant Browser and the only thing was that I couldn't make another shout until that message went away. Of course, that's understandable though


However, I'm having a problem with permissions. How would I go about setting permissions for the shout box so normal registered members will not be able to access the archive and edit/delete shouts? I was not aware that a registered member could do this until one reported it to me :?

[Zachariah]

I had someone yell @ me to make this work on vBgallery.
This might be something ZT should add to the main Build ?

Adding:
$vboptions[bburl]/vbshout.php vs. vbshout.php in references.

Reason:
All links would show up in the gallery sub-folder as: /gallery/vbshout.php vs. /forums/vbshout.php



- In the XML installer of vbshout

Search: vbshout.php
Replace: $vboptions[bburl]/vbshout.php

Result:

5/30/2006 9:03:41 AM
Search String: $vboptions[bburl]/vbshout.php
File Mask: vbshout.xml

Line  23 -   <template name="forumhome_vbshout" templatetype="template" date="1124952989" username="Zero Tolerance" version="3.5.0 Release Candidate 2"><![CDATA[<form action="$vboptions[bburl]/vbshout.php?{$session['sessionurl']}" method="post" name="vbshoutform" onsubmit="return postShout(this)">
Line  51 -     <a href='$vboptions[bburl]/vbshout.php?{$session['sessionurl_q']}do=archive'>Shoutbox</a>
Line 137 -   ShoutRequest.send('$vboptions[bburl]/vbshout.php', 'nocache=' + (5 * Math.random() * 1.33) )
Line 191 -  doShout.send('$vboptions[bburl]/vbshout.php', 'do=shout&shout=' + PHP.urlencode(Shout) + sb_CollectHV(document.forms['vbshoutform']))
Line 319 -  doDel.send('$vboptions[bburl]/vbshout.php', 'do=deleteshout&id=' + this.shoutid)
Line 373 -   doShout.send('$vboptions[bburl]/vbshout.php', 'do=editshout&id=' + this.shoutid + '&shout=' + PHP.urlencode(ShoutMsg))

Found 6 occurrences.

[aky]

anyone know how to turn this off please????

[Total666]

Originally Posted by aky

anyone know how to turn this off please????

In your admin panel . plug in's - manage products . - disable it in there .. Total

[mano1.com]

how would I edit the interface a bit? remove the rich formatting options, etc..?

[mano1.com]

nevermind.. got it!