[RELEASE] Poll Hack v1.0.1

[EDIT] Some users found a badley-coded part of the hack, I am rewriting that part and therefore have deleted the url from this post[/EDIT]

The Poll Hack for the vB, now updated for speed and fuctionality. Demo at http://www.naboonline.com/polltest/

new features from 0.9.2 (previous version)

- if a user votes without logging in, is asked to login and the pollvote still counts
(2 new templates,error_pollvotenologin, error_pollvoteinvaliduser)
- Graphical view of poll results available. Template pollyesvote has a new variable $pollbargraph. If you
do not want to have the graphical view, simply remove the variable.
- poll icon ist now not needed to be inserted into the vBulletin icon db.
- new file pollmodule.php - hacks in files only reference to it, much less code to enter into the new files!
- speed enhancements and less mysql calls.

Overall features

- Let registered users post a new thread that has a poll integrated in it
- Let registered users vote on the poll
- Multiple votes impossible as userid is stored on vote
- Define # of poll options in CP
- Limit who can post a poll by usergroups (from the control panel)
- Designed to be easily translated. Only some text is hard coded (see localisation section below)
- Fully templateable - you can customise the look of the poll
- Users who can not post can not vote as well
- Make sure person did not vote, press back, and vote again
- Admin/Moderator edit of Polls at all times
- Edit Poll while no votes (for user who started the poll thread)
- vB code parse for options
- closing a thread == close a poll
- Admin delete
- View results without voting
- Close a poll (admin/mod/author)
- Graphical view of votes (bar graph and/or pie graph) **NEW**

Note to upgraders: Due to a change in the how data is stored, the new poll is not backwards compatible. Therefore, you will need to run updatepoll.php

The poll hack will be intergrated into vBulletin 2.0, so if you are in no hurry, you should better wait


[Edited by doron on 11-04-2000 at 06:00 AM]

Hello,

Here is the HTML in the form:

<FORM ACTION=poll.php method=post>
<INPUT TYPE=hidden name=pollid VALUE=2>
<INPUT TYPE=hidden name=pollid VALUE=2>
<INPUT TYPE=hidden name=threadid VALUE=60786>

< poll html here >

<INPUT TYPE=hidden NAME=action VALUE=pollvote>
<INPUT TYPE=hidden NAME=username VALUE=Jim Murray>
<INPUT TYPE=hidden NAME=password VALUE=xxxxxx>
<INPUT TYPE=submit NAME=submitaction VALUE=Vote!>

[Edited by VirtueTech on 11-03-2000 at 07:19 PM]

Jim you should delete that line with your password as I could now log on as you by passing the encrypted password on the command line.

I tried to access that thread but it must be in a forum that I don't have access to and I forget the login info for phpMyAdmin so I could tweak myself to an admin

[Edited by freddie on 11-03-2000 at 06:47 PM]

Freddie - I made you an admin and emailed you your password to webmaster@hedgehogwheels.com


Also - Doron tried logging in and said he was able to vote on the poll. I have tried clearing my cookies...Other users have tried and gotten the same error I did.


I don't see how he could have voted and myself and my users cannot.

[Edited by VirtueTech on 11-03-2000 at 06:54 PM]

Well Jim I logged on as you using the trick I warned you about and this is what I see as the code for the page where it asks for your name/password

<form action="poll.php" method=post>
Username: <INPUT TYPE="TEXT" NAME="username" SIZE=7 MAXLENGTH=25>
Password: <INPUT TYPE="PASSWORD" NAME="password" SIZE=7 MAXLENGTH=13>
<input type="hidden" name="action" value="pollvote">
<input type="hidden" name="optionNumber" value="">
<input type="hidden" name="pollid" value="">
<input type="submit" value="Login!"></form>

I see fields with no values..Doron^^^I also don't see a threadid.

I was able to vote as myself as it didn't ask me to login.

I don't know how Doron tells if you are logged in but it should not be asking you to login when click on the vote button. Are you checking if $bbuserid != 0?

Hello Freddie,

GOD what trick is that? ICQ me if you don't mind...please and tell me...thanks.

Also...why does it go to the password page if I am already logged in...

If you lookk above you will see the HTML source from the showthread page where the poll resides.

this is wierd, why is it for you not handing over the id's with form submit, but is for me and new people.

I'd suspect it is in my coding, but there is nothing that would differenciate between users.

My user on his forum is not new, it has been there since day 1.

Jim edit your post where you posted the HTML and remove the line that has your password in it!

Jim has a space in his name whereas we don't, you could start with that and go from there.

[edit]

Yes I changed my name to "rangers fan" and now I get prompted to login so your user verification code is at fault. Why do you pass the password/username through the form instead of just checking for $bbuserid == 0 in poll.php and prompting them to login if it is 0?

btw Jim I was reading the threads in the mods forum and you can't embed viruses into .jpgs so don't fear that someone can get a virus by uploading avatars. What people believe, geez.

[Edited by freddie on 11-03-2000 at 07:23 PM]

freddie: came to the same conclusion, i sent him a fix, gonna see if that helps. stupid mistakeof mine