vBug Tracker Lite 3.5.1

[high]The XSS security flaw reported in this modification has been fixed by Staff and a new zip file (3.5.1a) uploaded.[/high]

Here is a port of my vBug Tracker hack from vb 3.0.x. This mimics the Bug Tracker found at vBulletin.

Details:

• 7 - table additions
  96 - Phrases Added
  3 - file additions
  2 - xml files
  8 - template additions
  3 - Plugins

Please click install for support! For those interested, the Pro version is in development and should be out soon. It will be released at vb-scripts.com.

Sept 25, 2005
Bug fixes:

• * Added Missing phrases for editing status, type & severity.
  * Fixed bug in changing displayorder

Sept 26, 2005
Bug Fixes/Changes

• * Fixed bugcache issue and tested
  * Added admin usergroup permissions

Sept 27, 2005 (Part 1)
Bug Fixes:

• * Fixed subscribe issues and missing phrases.

Sept 27, 2005 (Part 2)

• * Complete rewrite of the subscription piece including the unsubscribe.
  * Subscriptions fully tested and working from all aspects!

Nov 7, 2005

• * Fixed missing table prefix when editing status.
  * Fixed issue when editing severities.
  * Now supports secondary usergroups.

Nov 24, 2005

• * Fixed extra span tag in list template.
  * Fixed searching on version.
  * Added "unassigned" to dropdown.

Jul 11, 2006

• * XSS Flaw fixed by Staff.

To upgrade:

Import the product xml and select "Allow Overwrite".
Upload all the files overwriting the old ones.

Lastly... Please follow the instructions exactly as they are outlined in the documents/install.txt and in the order as listed to avoid any problems.

Updated for vBulletin 3.7, Get it here

[Dan]

did you go through the php file?

[King Kovifor]

Explain...

[Dan]

Open bugs.php and replace vbugs.php with bugs.php

[King Kovifor]

Every instance? So that means all my upgrades I'd have to do that? And I'd also have to edit the templates?!

[Dan]

Only when you upgrade this hack (if there is ever another update)

[King Kovifor]

OK. I'll get right on that!

[rwoelich]

Just a note that I'm having some issues with this. I uninstalled it after designing my own bug reporting system, and for some reason the rows for the vBug settings in the usergroup editor still show up, just without phrases, and when I go to make changes to a usergroup I get a database error because it's trying to save vBug settings to a column that doesn't exist anymore. I can't for the life of me figure out where the settings table row is coming from or the part with that query. Any ideas?

Edit: Never mind. Damn bitfields...

[Xplorer4x4]

I have a forum set up to redirect to bugs.php. Members must log in again before using it.

[Xplorer4x4]

Also I thought there was some sort of ntoification system built in?

[PalmNut]

Seems to be a bug with the moderation system. Even with the moderation option set to "Yes," all bugs submitted via vbugs.php are live for all users to see. I found a couple of issues in the code that address this. The vbugs.php is looking for the wrong option setting and bug moderation value, cleaning some global variables unnecessarily in the process.

Details for editing:

Starting at line 650 in

PHP Code:

  $vbulletin->input->clean_array_gpc('p', array(
      'title' => TYPE_STR,
      'vbug_typeid' => TYPE_UINT,
      'vbug_versionid' => TYPE_UINT,
      'vbug_severityid' => TYPE_UINT,
      'vbug_statusid' => TYPE_UINT,
      'description' => TYPE_STR,
      'moderate' => TYPE_UINT,
      'subscribe' => TYPE_UINT
      )); 


remove

PHP Code:

      'vbug_statusid' => TYPE_UINT, 


and

PHP Code:

      'moderate' => TYPE_UINT, 


Then immediately below find

PHP Code:

if($vbulletin->options['vbug_moderated']) 


and change the line to

PHP Code:

if($vbulletin->options['vbug_bug_moderate']) 


Below that find

PHP Code:

    $db->query_write("
    INSERT INTO " . TABLE_PREFIX . "vbug (userid, title, description, vbug_statusid, postdate, vbug_severityid, vbug_typeid, vbug_versionid, moderate, lastedit, lastreplyuid)
    VALUES (" . $vbulletin->userinfo['userid'] . ", '" . $db->escape_string($vbulletin->GPC['title']) . "', '" . $db->escape_string($vbulletin->GPC['description']) . "', " . $vbug_statusid . ", '" . TIMENOW . "', " . $vbulletin->GPC['vbug_severityid'] . ", " . $vbulletin->GPC['vbug_typeid'] . ", " . $vbulletin->GPC['vbug_versionid'] . ", " . $vbulletin->GPC['moderate'] . ", " . TIMENOW . ", " . $vbulletin->userinfo['userid'] . ")
    "); 


and replace with

PHP Code:

    $db->query_write("
    INSERT INTO " . TABLE_PREFIX . "vbug (userid, title, description, vbug_statusid, postdate, vbug_severityid, vbug_typeid, vbug_versionid, moderate, lastedit, lastreplyuid)
    VALUES (" . $vbulletin->userinfo['userid'] . ", '" . $db->escape_string($vbulletin->GPC['title']) . "', '" . $db->escape_string($vbulletin->GPC['description']) . "', " . $vbug_statusid . ", '" . TIMENOW . "', " . $vbulletin->GPC['vbug_severityid'] . ", " . $vbulletin->GPC['vbug_typeid'] . ", " . $vbulletin->GPC['vbug_versionid'] . ", " . $moderate . ", " . TIMENOW . ", " . $vbulletin->userinfo['userid'] . ")
    ");