Top 'X' Stats

[high]Security Fix: The uploaded version fixes all issues concerned with the recent security vulnerabilities. Sorry I haven't been around I don't really do anything plugin wise anymore.[/high]

Oh this version also works with all current version of vB 3.6. So feel free to use it on that version.

- InfiniteWebby

The low down

Well this is the vB 3.5.0 version of my hack. It is much the same as the original except that for some added stuff that I never released

Basically what it does is show the Top 'X' (edited via the vBulletin options in the admincp) newest members, top posters and newest replies on the Forumhome.

So what's new in this version?

Well for one all settings, which include amount of stats to show on forumhome and the extended page, thread title and username truncation, excluded forums and 'new' and 'old' thread prefixes.

Secondly there is now an extra page where you are able to choose exactly how many stats to show.

And lastly and most importantly it only takes 3 simple steps to install =)

What's on the horizon?

- More "stat blocks" including top reputation and top thread based on views or replies. If you have a suggestion please let me know, prefferably via pm.
- Proper can view other users threads permissions. At the moment I cannot think of how to block other people threads while still showing your own without totally re-writing the hack =(.

Version 1.2.1 is a re-release with who's online additions as well as some template changes. So you are best to reinstall the whole thing all over again.

So anyway enjoy and click install.

[Snake]

Thanks, works fine on my forums.

http://forums.philosopherslegacy.net

[The Realist]

Any ideas anyone?

Originally Posted by The Realist

Getting this error in regards to uncached templates on the botton of my forums:

Uncached templates: topXstats_member_bit (5)
Uncached templates: topXstats_poster_bit (5)
Uncached templates: topXstats_stats_bit (1)
Uncached templates: topXstats_thread_bit (5)

How to I cach them?

[Snake]

Yeah I would like to know as well.

[InfiniteWebby]

Originally Posted by The Realist

Any ideas anyone?

It's already in the product. Try re-uploading and installing it.

[CupraSi]

Uploaded fine for me thanks

One question

When you are in ACP it says something about extended stats pages

What is this please as I cant see it and when I click on the stats link I get a 404 page

[RDX1]

When installing:

Database error in vBulletin 3.5.3:

Invalid SQL:

				INSERT INTO setting
				(varname, grouptitle, value, defaultvalue, datatype, optioncode, displayorder, advanced, volatile, product)
				VALUES
				(
					'topXstats_displayrecords_forumhome',
					'topXstats',
					'5',
					'5',
					'number',
					'',
					10,
					0,
					1,
					'topXstats'
	),
	(
					'topXstats_displayrecords',
					'topXstats',
					'30',
					'30',
					'number',
					'',
					20,
					0,
					1,
					'topXstats'
	),
	(
					'topXstats_maxdisplayrecords',
					'topXstats',
					'200',
					'200',
					'number',
					'',
					30,
					0,
					1,
					'topXstats'
	),
	(
					'topXstats_excludedforums',
					'topXstats',
					'0',
					'0',
					'free',
					'',
					40,
					0,
					1,
					'topXstats'
	),
	(
					'topXstats_threadchars',
					'topXstats',
					'0',
					'0',
					'number',
					'',
					50,
					0,
					1,
					'topXstats'
	),
	(
					'topXstats_userchars',
					'topXstats',
					'0',
					'0',
					'number',
					'',
					60,
					0,
					1,
					'topXstats'
	),
	(
					'topXstats_newpostprefix',
					'topXstats',
					'[New]',
					'[New]',
					'free',
					'',
					70,
					0,
					1,
					'topXstats'
	),
	(
					'topXstats_oldpostprefix',
					'topXstats',
					'[Old]',
					'[Old]',
					'free',
					'',
					80,
					0,
					1,
					'topXstats'
	);

MySQL Error  : Duplicate entry 'topXstats_displayrecords_forumhome' for key 1
Error Number : 1062
Date         : Friday, February 17th 2006 @ 07:45:55 AM
Script       : *
Referrer     : http://www.*/plugin.php?do=productadd
IP Address   : *
Username     : *
Classname    : vb_database

[CupraSi]

Originally Posted by CupraSi

Uploaded fine for me thanks

One question

When you are in ACP it says something about extended stats pages

What is this please as I cant see it and when I click on the stats link I get a 404 page

Anyone know about the extended stats?

[Muscolino]

Yet another hack I'm having problems with

I've installed it but get this:

Database error in vBulletin 3.5.3:

Invalid SQL:
SELECT userid, usergroupid, IF(displaygroupid=0, usergroupid, displaygroupid) AS displaygroupid, username, posts FROM user ORDER BY posts DESC LIMIT 0,;

MySQL Error : You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1
Error Number : 1064

[georgedd]

There seems to be a bug/ security issue I just discovered with this plugin. If the title of a new thread contains HTML tags, it's displayed as is (not converted to entities) by the top x stats plugin...

[georgedd]

BTW, I've gone ahead and fixed the "non entity" bug I reported above. For those interested, inside topxstats.php (or edit directly in vbulletin control panel), find the lines:

		else
		{
			$getstats_thread[titletrimmed] = $getstats_thread[title];
		}
	}

and add beneath it one extra line:

		else
		{
			$getstats_thread[titletrimmed] = $getstats_thread[title];
		}
	}
	$getstats_thread[titletrimmed]=htmlspecialchars($getstats_thread[titletrimmed]);

Also, inside the template "topXstats_thread_bit", find:

title="<phrase 1="$getstats_thread[title]"

and change that to:

title="<phrase 1="$getstats_thread[titletrimmed]">

I highly recommend you implement the above changes or changes of your own. Otherwise, someone can execute arbitrary JavaScript code on your site just by entering as the title of a thread the script, such as:

<script>alert("hi")</script>