Admin/Mod BBcodes

this is an easy hack for admins and mods who edit their users' posts and always wanna leave a msg at the bottom of it!

check the screenshots!
download the zip file for installation instructions!

For those who are looking to restrict the use of these bbcodes for normal users, please use this hack:
Advanced BBcode Permissions

http://www.oneforum.org

[Delphiprogrammi]

well,

nice addition BUT it has a serious security hole.*anybody* with a username can go to www.yourboard.com/forum/misc.php?do=bbcode this generates a list of bbcode tags your board uses.The "advanced bbcode permissions hack" only handles permissions for bbcode build into vbulletin not custom bbcode tags so without some way to restrict this it is pretty useless

also ......

DO NOT TURN ON DEBUG MODE ON LIVE SITES

danger Will Robinson danger .....

[Smiry Kin's]

Originally Posted by Delphiprogrammi

well,

nice addition BUT it has a serious security hole.*anybody* with a username can go to www.yourboard.com/forum/misc.php?do=bbcode this generates a list of bbcode tags your board uses.The "advanced bbcode permissions hack" only handles permissions for bbcode build into vbulletin not custom bbcode tags so without some way to restrict this it is pretty useless

also ......

DO NOT TURN ON DEBUG MODE ON LIVE SITES

danger Will Robinson danger .....

yeh your right dude..

[high]* Smiry Kin's going to uninstall, unless a fix is made soon[/high]

[Luggruff]

Originally Posted by Smiry Kin's

yeh your right dude..

[high]* Smiry Kin's going to uninstall, unless a fix is made soon[/high]

*So is Luggruff*

[Delphiprogrammi]

well,

you could add a plugin on hook location bbcodeparse_start which checks the individual permissions using the bitfields from the advanced bbcode permissions hack.But you need to modify this hack a bit.

i'll have a look later no time for it now

[Darat]

Although I can't get it to work you can alter the Advanced bbcode permissions mod to control the usergroups that can use the new tags.

Download the Advanced permission add-on and edit the bitfield_advancedbbcodepermissions.xml file to add these two lines to the group options:

<bitfield name="allow_bbcode_admin" group="advanced_bbcode_permissions" phrase="allow_bbcode_admin">1024</bitfield>

<bitfield name="allow_bbcode_mod" group="advanced_bbcode_permissions" phrase="allow_bbcode_mod">2048</bitfield>

Save that. Then open the product-advancedbbcodepermissions.xml file and add these two lines:

<phrase name="allow_bbcode_admin"><![CDATA[[ADMIN]]]></phrase>
<phrase name="allow_bbcode_mod"><![CDATA[[MOD]]]></phrase>

Save that file.

Then install the Advanced permissions product as per the instructions and you can then use that to control permissions to the new "admin" and "mod".

(Word of warning - I can't at the moment test this but it should work!)

[Darat]

I've got this working now - rather embarrassing I'd been mucking around class_bbcode a little while ago on my test forum to see if I could implement this and forgot about them, once I started from original files it all worked first time!

I've modified the advanced bbcode permissions to handle the new tags and that works – so the codes can only be used by a mod or admin however if I use more then one mod box in the thread only the first one is parsed correctly – the subsequent ones are ignored as if I didn’t have permission to use the tag,

[Delphiprogrammi]

well,

if u use that hack called "advanced bbcode permissions" then something like this should work

PHP Code:

if(!$vbulletin->userinfo['permissions']['advanced_bbcode_usergroup_permissions'] & !$vbulletin->bf_ugp_advanced_bbcode_usergroup_permissions['allow_bbcode_modwarn'])//this is set in the bitfield XML 
{
        //no permission
} 


[Darat]

I've got the advanced bbcode hack installed and working but if I post more then one tag in a thread only the first one is correctly parsed, the subsequent tags are ignored as if I had no permission.

[Luggruff]

Originally Posted by Darat

<bitfield name="allow_bbcode_admin" group="advanced_bbcode_permissions" phrase="allow_bbcode_admin">1024</bitfield>

<bitfield name="allow_bbcode_mod" group="advanced_bbcode_permissions" phrase="allow_bbcode_mod">2048</bitfield>

What is 1024 and 2048?

Originally Posted by Delphiprogrammi

well,

if u use that hack called "advanced bbcode permissions" then something like this should work

PHP Code:

if(!$vbulletin->userinfo['permissions']['advanced_bbcode_usergroup_permissions'] & !$vbulletin->bf_ugp_advanced_bbcode_usergroup_permissions['allow_bbcode_modwarn'])//this is set in the bitfield XML 
{
        //no permission
} 


would work? instead of Darat's solution? And where to put it?

Details please !

[Delphiprogrammi]

Originally Posted by Luggruff

What is 1024 and 2048?

those are the bitfield values vbulletin uses to identify each bitfield you can read this if you want to better understand it

Originally Posted by Luggruff

would work? instead of Darat's solution? And where to put it?

Details please !

that code would check the value of a bitfield.I didn't check if it *does* work correctly.These two tags are a nice thing but it needs some way to reserve it for mods,supermods, or administrators.We need to figure out what hook location can be used to get that effect

[Abe1]

Originally Posted by Darat

Although I can't get it to work you can alter the Advanced bbcode permissions mod to control the usergroups that can use the new tags.

Download the Advanced permission add-on and edit the bitfield_advancedbbcodepermissions.xml file to add these two lines to the group options:

<bitfield name="allow_bbcode_admin" group="advanced_bbcode_permissions" phrase="allow_bbcode_admin">1024</bitfield>

<bitfield name="allow_bbcode_mod" group="advanced_bbcode_permissions" phrase="allow_bbcode_mod">2048</bitfield>

Save that. Then open the product-advancedbbcodepermissions.xml file and add these two lines:

<phrase name="allow_bbcode_admin"><![CDATA[[ADMIN]]]></phrase>
<phrase name="allow_bbcode_mod"><![CDATA[[MOD]]]></phrase>

Save that file.

Then install the Advanced permissions product as per the instructions and you can then use that to control permissions to the new "admin" and "mod".

(Word of warning - I can't at the moment test this but it should work!)

Can you tell me why this should work? There is more then just adding bitfields to allow or not allow BBCODES. The bitfield numbers I use are vbulletin's numbers and I over ride them in my hack. Custom BBcodes dont get a bitfield. There is no reason why these insructions should work.

I am trying to work on a way to get permissions for custom bbcodes.

[Darat]

Originally Posted by Abe1

Can you tell me why this should work? There is more then just adding bitfields to allow or not allow BBCODES. The bitfield numbers I use are vbulletin's numbers and I over ride them in my hack. Custom BBcodes dont get a bitfield. There is no reason why these insructions should work.

I am trying to work on a way to get permissions for custom bbcodes.

In the code to add to "class_bbcode" (that Wild-Wing posted) there is the code:

if ($vbulletin->options['allowedbbcodes'] & ALLOW_BBCODE_ADMINWARN)

Isn't that then using going to use the new bitcodes that we defined to control these new tags. And my extension to your hack then lets you switch them on and off in the admincp (and that seems to does work).

[Abe1]

Originally Posted by Darat

In the code to add to "class_bbcode" (that Wild-Wing posted) there is the code:

if ($vbulletin->options['allowedbbcodes'] & ALLOW_BBCODE_ADMINWARN)

Isn't that then using going to use the new bitcodes that we defined to control these new tags. And my extension to your hack then lets you switch them on and off in the admincp (and that seems to does work).

I still dont understand. I think you are missing a word some where in your post.

[Darat]

Wild Wing code adds the [admin] and [mod] tag into class_bbcode and like the standard bbcodes he does a check if a bit is set or not to see if someone has permission to use them. What I was trying to do was add setting those bits to your script so that they can be toggled in the admincp in your hack.

[Abe1]

Originally Posted by Darat

Wild Wing code adds the [admin] and [mod] tag into class_bbcode and like the standard bbcodes he does a check if a bit is set or not to see if someone has permission to use them. What I was trying to do was add setting those bits to your script so that they can be toggled in the admincp in your hack.

Got it.

I would not recommend adding to vb bitfields for 2 reasons.
1) What if vb added to it?
2) What if another coder addes to it? Best no coders add to it.