Messing with $post[message] in functions_newpost.php-The quest continues! Form vars?

[MTGDarkness]

When I try to put something into postbit_display_start, like, say

echo "this is a test statement";

What happens is, it gets put at the top of the page before the doctype declaration. I'm kind of stumbling around in the dark here.

--------------- Added [DATE]1235820573[/DATE] at [TIME]1235820573[/TIME] ---------------

Okay...
I wrote this plugin:

Postdata_start

if ($post[field11] && $post[field12])
{
require_once(DIR . '/includes/class_bbcode.php');
$parser =& new vB_BbCodeParser($vbulletin, fetch_tag_list());
$parsed_text = $parser->do_parse($text, $do_html, $do_smilies, $do_bbcode, $do_imgcode, $do_nl2br, $cachable);  

$text = $post[field11].$message.$post[field12];
}

And this in postbit_legacy:

<if condition="$post[field11] AND $post[field12]">$parsed_text
		<else />	$post[message]</if>

(replaces $post[message])

But when I tried it out, no HTML was outputted. And this is probably a serious security risk, seeing as people can type in PHP code for the fields and have it execute. How can I change that?

[BigJohnny]

one way to find out where to execute your code is to look in tje php files themselves. for instance, showthread.php for stuff dealing with posts.

If you look through the code you will see the hook locations. Basically you can find out what hook is being called where. Once you know where it is being called in the code, you can go back to your plugin manager and write your code for the hook that will execute where you want it to.

for instance, on line 1078 of showthread.php i see
[code]
($hook = vBulletinHook::fetch_hook('showthread_postbit_crea te')) ? eval($hook) : false;
[/hide]

so if i were to make a plugin inside that hook it know it will be executed when that hook is called in the php file.

I dont really know if its the best way to find out which hook is t he right one for your needs, but it works for me quite often

[MTGDarkness]

Come on... Can't anyone help me out here?

[MTGDarkness]

Which file processes the form from replies? Which actual PHP file in vBulletin?

[Lynne]

Go to the page and look in the page source. You will find some line like this (this is from somewhere else, it's not it):

<form action="newthread.php?do=postthread&amp;f=11" method="post" name="vbform" onsubmit="return vB_Editor['vB_Editor_001'].prepare_submit(this.subject.value, 5)">

That tells you the form and do value that will be submitted.

[MTGDarkness]

One final question, and then I think I'll FINALLY have this stupid issue! (Breakthrough was reached by just scanning all the files that seemed relevant for a comment telling me about "this is where we process posts).
What I did was this:

In file: functions_newpost.php

Find:

PHP Code:

    $post['emailupdate'] = intval($post['emailupdate']);
    $post['rating'] = intval($post['rating']);
    $post['podcastsize'] = intval($post['podcastsize']); 


Add under:

PHP Code:

    $post['message'] = "<stuff>" .$post['message']. "<stuff>"; 


And if you put bbcode in there... it will parse! Hallelujah!

As to my questions...

1. Will a variable that works well in the template (in this case, the aforementioned field variables) work as they are there in the files? Like say I put this string in functions_newpost.php (where I put the last string I mentioned):

PHP Code:

    $post['message'] = $post['field11'].$post['message'].$post['field12']; 


How can I make that work in the file itself?

[MTGDarkness]

Bump?

[Dismounted]

If you are talking about the build_new_post() function, no, it will not work.

1. User info is not available there.
2. If it did exist, when the user changes the field, it will not be reflected in their posts.

[MTGDarkness]

GAAAAAAAAAAAAAAAH

So it's also impossible to get the info to there? How about setting a plugin that way? The guys over at MTGSalvation and MTGNews figured it out somehow!

Sorry if I sound a little hysterical; I am.

[Dismounted]

postbit_display_complete