[AJAX] vBShout v2.0

[high]Staff Edit/Update[/high]

I have released an updated version of this hack (version 2.0.1), this version fixes some security issues with this hack. All version prior to this one allow users to insert html in their shouts, this can cause problems with them using html that breaks the site layout or malicious javascript. Download the new zip file (vBshout_fixed.zip) and upload the new vbshout.php file to patch/upgrade. If you want to manual instructions they are in the zip file, in the file bugfixes.txt

Second Staff update

I've uploaded a new version of this hack, dubbed '2.0.2'. This one should fix the html injection issues without breaking special characters. To upgrade, download the new zip file and upload the new vbshout.php file.

Please note that this only fixes the html injection issues. I do not use this hack on my own forum (although I've tested this on a client's board) so I will not be fixing the server load issues. I suggest you do not install this hack if you can't deal with the extra server load, as it's rather intensive.

- Brad

[high]End staff edit[/high]

Well, been a while since I've been to vb.org and released anything, thought i'd break the trend and whip up something quick while I have a little spare time.

A shoutbox as you would assume, a very simple one to start off with, but does include AJAX Technology, which pushes the shoutbox 1 step closer to live, messages from other people will appear with no refreshing, and so will yours that you post

A preview is below, i'd estimate a 50 second installation max

Primary Features:
- AJAX Technology (no refreshing)
- Administration control an display element options
- Fast format editor

Change Log::

- v1.1:
WOL (Who's Online) Correction

- v1.2:
New Posting Featurs (Bold/Italic/Underline/Colour/Font)
Admin Controls

- Change location/position of shoutbox
- Change number of shouts displayed
- Switch vbcode/similes on/off

- v1.3
Firefox javascript issue fixed
New Admin Controls

- Command Activation
- Swtch extra format options on/off
- Change position of editor (above/below messages)

New Commands

- /prune (Clears the shoutbox completely)
- /prune [username] (Clears all shouts posted by specified user)

- v1.4
Usergroup HTML Markup For Usernames
Clear Editor Button
Emoticons Pop Up Menu
Time display configurated to vBulletin settings
Username Links To Profile
New Admin Conrols

New vBShout Position (Directly Above Forums)
Banned Users
Banned Usergroups
Banned Permissions
Smilie Pop-Up Box Height
Smilie Pop-Up Box Width

New Commands

"/me" - Action message (all users are able to use this command)
/pruneshout [shout] - Deletes a single shout

- v1.5
Improved Smilies Display
XHTML 1.0 Transitional Valid (couple of errors fixed)
New Admin Options

Shoutbox Height
Smilies To Show
Shout Messages Order
Banned Permissions (fixed)

- v1.6
Bug Fixes:

- Unable to delete shouts that used /me command fixed
- Shouts being displayed from bottom-upwards only showed first 20 shouts

Automatically parses URL's

- v2.0
New Archive

- Displays shouts and pages
- Stats and top 10 shouters
- AJAX Edit/Delete (staff can edit/delete all shouts)

Enjoy,

- Zero Tolerance

[Leila]

Could someone tell me why the shout board control panel would not show up but everything else is working?

[mrmike]

Hi, first of all, thanx for a great hack!

Since I installed shoutbox and my members are in index.php (startpage) the wol (who's online) is updating activity continuously even if they not do anything. Now I've installed a total time spent on board hack and the inactivity time is set for 45min before members autologout but in this case the onlinetime just go on and on as long they stay on (startpage)...

Does anyone know a solution?

btw, sorry for my bad english

/Mike

[webspider]

Shout 2.1 does work with vb 3.6.0 but there is a problem with Internet Explorer users the shout always says Loading... and when you try to post a shout IE opens a blank page.

[rareclownfish]

Hello bud, is there away to add an admin section where you can delete all the shouts at once?

[webspider]

/prune "enter" in the shout field

[Thug]

https://vborg.vbsupport.ru/showthread.php?p=1053081


Vbshout - I dont want peeps to edit/prune the shoutbox
Hi what do i do so i can change who can edit the shoutbox


eg when they click on 'shoutbox' at the top it takes them too

http://www.mysite.com/vbshout.php?do=archive


How do i change it so nobody (or only selected users) can click on edit or delete shouts on there

i have got some admin/supermods that are pruning and also randomly deleting shouts

[louis_chypher]

Originally Posted by Thug

https://vborg.vbsupport.ru/showthread.php?p=1053081


Vbshout - I dont want peeps to edit/prune the shoutbox
Hi what do i do so i can change who can edit the shoutbox


eg when they click on 'shoutbox' at the top it takes them too

http://www.mysite.com/vbshout.php?do=archive


How do i change it so nobody (or only selected users) can click on edit or delete shouts on there

i have got some admin/supermods that are pruning and also randomly deleting shouts

trying to search this thread on "admin" would lead you to this post https://vborg.vbsupport.ru/showthrea...min#post961363 or perhaps not.

[Thug]

Originally Posted by louis_chypher

A possible quick solution to limit access to the archive and archive functions by user group :

There is a template called forumhome_vbshout that has as part of its contents a line with the following info: <a href='vbshout.php?{$session['sessionurl_q']}do=archive'>Shoutbox</a>

Perhaps one could possibly change that line so that it reads:

<if condition="can_moderate()">
<a href='vbshout.php?{$session['sessionurl_q']}do=archive'>Shoutbox</a>
<else />
Shoutbox
</if>

While that will not prevent a user from manually typing in the name of the link. It will prevent those without the knowledge of the links parameters from going further.

If one is a bit more interested in digging deeper one could, possibly, open the vbshout.php file and find:

if ($_GET['do'] == 'archive')
{

located around line 356/357

Then one could, possibly, insert below the line with the "{" and above the line "$navbits = array("vbshout.php?" . $vbulletin->session->vars['sessionurl'] . "do=archive" => 'Archive');"

something like:

//use for an individual access
//if ($vbulletin->userinfo['userid'] != X)
//use for usergroup access
if (!(in_array($vbulletin->userinfo['usergroupid'], array(6,7))))
{ print_no_permission();
exit();
}

Where 5=super moderators, 6=admin, 7=moderators, and (optional) X1= what ever other usergroup one wants to include (if one was not to use X1 then do remember to remove the "," as well).

Then it should be highly possible that one would, possibly, be able to highly limit the access to the Shoutbox, a most wonderful product!, archive functions.

Of course one would be on their in doing such things.:surprised:

Thanks..

if say someone wanted to edit it so more than one person had acess

they could put this instead..



if ($vbulletin->userinfo['userid'] != 1)
if ($vbulletin->userinfo['userid'] != 2)
if ($vbulletin->userinfo['userid'] != 5)
{ print_no_permission();
exit();
}


giving acess to users 1,2 and 5

[Thug]

How would i make it so that if a user has 30 posts or less it shows a essage on the shoutbox saying

Sorry but you need 30 posts or more to view the shoutbox

Thug

[GoNz00]

just hide the shoubox and use usergroup promotions to make it appear at 30