[VB3 RC3] Search by usergroup in memberlist

In memberlist in the advanced search you can search by name, web page,
posts... but you can't list all the members in a certain usergroup.

The leader of the usergroup has the option to view all the members
in the usergroup. This is an extension so any user can do a search
for a usergroup and check which members they have.

Why this? It is common to belong to a usergroup but not everybody has
the custom title of the group, you have no way of knowing who else
belongs to the usergroup besides asking the leader.

Info for hackers:
You may modify, improve, upgrade, redistribute this hack, include it
in another hack or yours or translate it provided you do it free of
charge and you distribute it in www.vbulletin.org at least, there is no
need to pm me asking for permission
Some portions of the code are (c) Jelsoft Enterprises Ltd.

[commTRU]

Originally Posted by DeMiNe0

i did all the file edits, and even reedited it, but when i search a usergroup i get the following:

The usergroup you are searching for was not found

even if i directly link to the usergroup ID i get the same. running vb 3.0.3

I had that same problem too. Its because I had edited my user group title to have bold tags surrounding them. Try copying the exact text straight from the title field when you edit your usergroup and see if that works.

cashpath, to make the group not joinable you would need to edit the usergroup settings and set the 'Public (Joinable) Custom Clubs' setting to No.

Thanks very much for this hack, it'll prove very useful to me

[top end ms]

If you could get this to work for VB 3.6 that would be AWESOME!

[DarkDraco07]

yea i need this for 3.6 as well

[sarahk]

This is actually really easy in 3.6 - I've been able to do everything via the Plugin Manager. Only outstanding issue is how to do the page navigation ... see http://www.vbulletin.com/forum/showthread.php?t=220020

I'll post the actual plugins once I've got it finished if anyone is interested.

[sarahk]

We've just had an attempt a sql injection targetted at this plugin

SELECT COUNT(*) AS users
FROM vb_user AS user
LEFT JOIN vb_userfield AS userfield USING (userid)

WHERE 1=1 AND ( concat( ',', user.membergroupids, ',') like '%,http://phonefamily.chat.ru/images?,%' || user.usergroupid = http://phonefamily.chat.ru/images?)
AND user.usergroupid IN (-1,6,34,7,2,33,38,5);

MySQL Error : You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near '://phonefamily.chat.ru/images?)
AND user.usergroupid IN (-1,
Error Number : 1064
Date : Saturday, April 12th 2008 @ 03:31:03 AM
Script : http://www.mysite.com/forum/memberlist.php?mqusergroup=http://phonefamily.chat.ru/images?
Referrer :
IP Address : 203.97.120.149
Username : Unregistered
Classname : vb_database

didn't work but could the variable management be more robust?