[AJAX] vBShout v2.0

[high]Staff Edit/Update[/high]

I have released an updated version of this hack (version 2.0.1), this version fixes some security issues with this hack. All version prior to this one allow users to insert html in their shouts, this can cause problems with them using html that breaks the site layout or malicious javascript. Download the new zip file (vBshout_fixed.zip) and upload the new vbshout.php file to patch/upgrade. If you want to manual instructions they are in the zip file, in the file bugfixes.txt

Second Staff update

I've uploaded a new version of this hack, dubbed '2.0.2'. This one should fix the html injection issues without breaking special characters. To upgrade, download the new zip file and upload the new vbshout.php file.

Please note that this only fixes the html injection issues. I do not use this hack on my own forum (although I've tested this on a client's board) so I will not be fixing the server load issues. I suggest you do not install this hack if you can't deal with the extra server load, as it's rather intensive.

- Brad

[high]End staff edit[/high]

Well, been a while since I've been to vb.org and released anything, thought i'd break the trend and whip up something quick while I have a little spare time.

A shoutbox as you would assume, a very simple one to start off with, but does include AJAX Technology, which pushes the shoutbox 1 step closer to live, messages from other people will appear with no refreshing, and so will yours that you post

A preview is below, i'd estimate a 50 second installation max

Primary Features:
- AJAX Technology (no refreshing)
- Administration control an display element options
- Fast format editor

Change Log::

- v1.1:
WOL (Who's Online) Correction

- v1.2:
New Posting Featurs (Bold/Italic/Underline/Colour/Font)
Admin Controls

- Change location/position of shoutbox
- Change number of shouts displayed
- Switch vbcode/similes on/off

- v1.3
Firefox javascript issue fixed
New Admin Controls

- Command Activation
- Swtch extra format options on/off
- Change position of editor (above/below messages)

New Commands

- /prune (Clears the shoutbox completely)
- /prune [username] (Clears all shouts posted by specified user)

- v1.4
Usergroup HTML Markup For Usernames
Clear Editor Button
Emoticons Pop Up Menu
Time display configurated to vBulletin settings
Username Links To Profile
New Admin Conrols

New vBShout Position (Directly Above Forums)
Banned Users
Banned Usergroups
Banned Permissions
Smilie Pop-Up Box Height
Smilie Pop-Up Box Width

New Commands

"/me" - Action message (all users are able to use this command)
/pruneshout [shout] - Deletes a single shout

- v1.5
Improved Smilies Display
XHTML 1.0 Transitional Valid (couple of errors fixed)
New Admin Options

Shoutbox Height
Smilies To Show
Shout Messages Order
Banned Permissions (fixed)

- v1.6
Bug Fixes:

- Unable to delete shouts that used /me command fixed
- Shouts being displayed from bottom-upwards only showed first 20 shouts

Automatically parses URL's

- v2.0
New Archive

- Displays shouts and pages
- Stats and top 10 shouters
- AJAX Edit/Delete (staff can edit/delete all shouts)

Enjoy,

- Zero Tolerance

[Shazz]

No errors , Clean on 3.6

[Digitalus]

Originally Posted by Stoebi

Hi,

I've a problem if I change the number of random smilies to show on the shoutbox.

With the default settings (0) I've no problems, but if i change the value i get smilies twice if I hit the smiley button. In my example I've changed 0 to 8 and it will show 2 or 3 same smilies from 8.

PHP Code:

    if ($vbulletin->options['shout_smilies_show'] > 0)
    {
        while ($Used < $vbulletin->options['shout_smilies_show'])
        {
            $GetEmo = $Total_Smilies;
            $GetEmo = rand(0, $GetEmo);

            if (!in_array($GetEmo, $UsedArr) && $Smilie_Cache[$GetEmo])
            {
                $Used++;
                $GetEmo = $Smilie_Cache[$GetEmo];
                $Smilie_Build .= '<a href="#" onclick="return sb_Smilie(\''.$GetEmo['smilietext'].'\')"><img src="'.$GetEmo['smiliepath'].'" alt="'.$GetEmo['title'].'" border="0" /></a> ';
            }
        }
    } 


I think the problem is the random line -> $GetEmo = rand(0, $GetEmo);


Is there somebody which can help to improve this, please?


Regards, Stoebi


Edit:
Solved. Many thx to Boothby from vbhacks-germany.com

Hi @all

I have the same problem..
So how can we solve the problem?

greetz

[Masiello]

Anybody Know if that vbshout installation waste the XHTML and CSS validation for the original vB installation that use the default template in vBulletin 3.6.0 Gold?

[hotwheels]

works on the official release of 3.6

[Total666]

Has anyone figured out how to get the auto-prune to work with 3.6 ??? The auto-prune worked great with 3.54 .. Ideas ?? Total

[hotwheels]

Did anyone ever figure out why this is happening? I just reinstalled this mod on my site, was able to post 2 time's, then everything disappeared accept for the wording i posted......

[Masiello]

Big problem with characters like <> " ' , eccc

I think this is another Bug, when for example I ban e specific user Group that is Unregistered/ Not Loged Users, these users see anyway a vbshout window and see this message
"Warning: Invalid argument supplied for foreach() in /vbshout.php on line 293"

Forget, I'm using vB 3.6.0

[Rickie3]

hope someone can help me here,some members are abusing the BB code in the shoutbox,I want to allow smilies still,but how can i disable the BB codes in the shoutbox please!!!

[Keyser S?ze]

this is prolly known but i just thought id say, that when u quote something it messes up, for example

"backup"

turns into this

&quot;backup&quot;

[YoungComposers]

For the people above who are experiencing the " -> &quot; bug, try commenting out line 120 which reads:

$text = htmlspecialchars_uni(trim($text));

I think this will still result in all characters like < being cleaned etc., but it misses out ", which should be OK in most circumstances.

Anyway, I need help with something. I'm trying to add badword filter functionality to the shoutbox with the following code placed above line 343:

    $badwords = array('badword1' => 'replacement1', 'badword2' => 'replacement2', 'badword3' => 'replacement3');
    $vbulletin->GPC['shout'] = str_ireplace(array_keys($badwords), array_values($badwords), $vbulletin->GPC['shout']);

Obviously I've replaced the actual badwords to avoid antagonizing staff around here... Anyway, this code should work fine, but when it's added in, the shoutbox just plain refuses to insert it into the database. It's the same no matter what you set $vbulletin->GPC['shout'] to. Even if you add some code to set it to "hello" just before it's inserted, it doesn't get inserted. Any help?