The Arcive of Official vBulletin Modifications Site.

Playing Flash and Media Files Inline · **Released**: 03-16-2005

Is it possible? Is there any security issue? I am thinking of releasing this hack, but I am not sure about the demands and security issue on this.

History:

Originally, I have window media files played directly (inline) in phpbb. When I moved to vb, I tried to seek help from vb.com to modify their attachment system without success. I understand that Vb's attachment system for security purpose. Therefore, I have to find other means to achieve what I want. I come up with this hack when my board is at its infancy stage. It probably still is infancy because, it is used as a test and fun board when I am at work

.

Requirement:

This hack might not work on all system due to different configuration, platform, and such. I will try to help you all as much as I can.

This hack will use your board attachment system to run mp3, wma, wmv, flash files. It is a bit server intensive. So be warned

Security Risk:

It has been known that flash files can be used to exploit and compromise certain securities on user computer. You might want to verify your flash attachment before enable flash playing inline on your forum.

Enut with the blah blah ??

Open your functions_showthread.php

Find

PHP Code:


			
function construct_postbit($post, $maintemplatename = 'postbit', $alternate = '')

{

Add under

PHP Code:


			
// flash attachment

    global $flashid,$flashfilename,$flashextension,$flashfilenameandlocation,$flashfilesize;



// wma attachment

    global $wmaid,$wmafilename,$wmaextension,$wmafilenameandlocation,$wmafilesize;

    // wmv attachment

    global $wmvid,$wmvfilename,$wmvextension,$wmvfilenameandlocation,$wmvfilesize;    

    // mp3 attachment

    global $mp3id,$mp3filename,$mp3extension,$mp3filenameandlocation,$mp3filesize;

//default media tag

    $media_controller= "$vboptions[bburl]/attachment.php?attachmentid=";

Find

PHP Code:


			
$attachment['filename'] = fetch_censored_text(htmlspecialchars_uni($attachment['filename']));

            $attachment['attachmentextension'] = strtolower(file_extension($attachment['filename']));

            $attachment['filesize'] = vb_number_format($attachment['filesize'], 1, true);

Add Under

PHP Code:


			
//flash attachment

            $flashfilename=$attachment['filename'];                            

            $flashextension=$attachment['attachmentextension'];                            

            $flashfilesize=$attachment['filesize'];                            

            $flashid=$post['userid'];                            

            $flashfilenameandlocation=$media_controller . $attachmentid  ;

            //wma attachment

            $wmaid=$post['userid'];

            $wmafilename=$attachment['filename'];

            $wmaextension=$attachment['attachmentextension'];                                        

            $wmafilenameandlocation=$media_controller . $attachmentid  ;            

            $wmafilesize=$attachment['filesize'];            

            //wmv attachment

            $wmvid=$post['userid'];

            $wmvfilename=$attachment['filename'];

            $wmvextension=$attachment['attachmentextension'];                            

            $wmvfilenameandlocation=$media_controller . $attachmentid  ;            

            $wmvfilesize=$attachment['filesize'];            

            //wmv attachment

            $mp3id=$post['userid'];

            $mp3filename=$attachment['filename'];

            $mp3extension=$attachment['attachmentextension'];

            $mp3filenameandlocation=$media_controller . $attachmentid  ;

            $mp3filesize=$attachment['filesize'];

Find

PHP Code:


			


eval('$post[\'imageattachmentlinks\'] .= "' . fetch_template('postbit_attachment') . '";');

                            $show['imageattachmentlink'] = true;

                        }

                        break;

Add Under

PHP Code:


			


case 'swf':

                        eval('$post[\'flashattachments\'] .= "' . fetch_template('postbit_attachmentflash') . '";');                        

                        $show['flashattachment'] = true;                        

                    break;    

                    

                    case 'wma':

                        eval('$post[\'wmaattachments\'] .= "' . fetch_template('postbit_attachmentwma') . '";');                        

                        $show['wmaattachment'] = true;                        

                    break;    

                    

                    case 'wmv':

                        eval('$post[\'wmvattachments\'] .= "' . fetch_template('postbit_attachmentwmv') . '";');                        

                        $show['wmvattachment'] = true;                        

                    break;    

                    

                    case 'mp3':

                        eval('$post[\'mp3attachments\'] .= "' . fetch_template('postbit_attachmentmp3') . '";');                        

                        $show['mp3attachment'] = true;                        

                    break;

GLOBAL Phrases:

Var: attach_wmv
Text: Window Media Video

Var: attach_mp3
Text: MPEG-1 layer 3 Audio Encoding :

Var: attached_flash
Text: Attached Flash File:

Var :attach_wma
Text : Window Media Audio :

Templates:

Go to your Postbit template

Find

Code:

					$post[imageattachments]
					</div>
				</fieldset>
			</if>

Add Under

Code:

<if condition="$show[flashattachment]">
<fieldset class="fieldset">
<legend>$vbphrase[attached_flash] $flashfilename </legend>

<div style="padding:$stylevar[formspacer]px">
$post[flashattachments]
</div>
</fieldset>

</if>



<if condition="$show[wmaattachment]">
<fieldset class="fieldset">
<legend>$vbphrase[attach_wma] $wmafilename</legend>

<div style="padding:$stylevar[formspacer]px">
$post[wmaattachments]
</div>
</fieldset>

</if>

<if condition="$show[wmvattachment]">
<fieldset class="fieldset">
<legend>$vbphrase[attach_wmv] $wmvfilename</legend>

<div style="padding:$stylevar[formspacer]px">
$post[wmvattachments]



</div>
</fieldset>

</if>
	
<if condition="$show[mp3attachment]">
<fieldset class="fieldset">
<legend>

$vbphrase[attach_mp3] $mp3filename</legend>

<div style="padding:$stylevar[formspacer]px">
$post[mp3attachments]

</div>
</fieldset>

</if>

Go to your board admin and add the templates under postbits.

The included templates file uses the existing templates on my board. Feel free to modified.

If you need help drop a line here or at www.aotrangmongmo.com

Moya · #22 03-17-2005, 03:50 PM

Quote:

Originally Posted by Johnny

you dont have to upload the files threw ftp to use the bbcode for a video or flash file you can just upload it threw the attachment system and link the attachment in the bbcode. i know it works that way on my board. :ermm:

Does every member have access to your ftp?

Lizard King · #23 03-17-2005, 05:19 PM

Quote:

Originally Posted by stitch

Does every member have access to your ftp?

I think he already explained that. He is using the vbulletin attachment system.

joe go · #24 03-20-2005, 05:00 PM

hi, i have a problem!
with upload comes the error:

Quote:

Ungueltige SQL-Abfrage:
INSERT INTO attachment
(userid, dateline, filename, filedata, filesize, visible, filehash, posthash, thumbnail, thumbnail_dateline, thumbnail_filesize)
VALUES
(1, 1111344033, 'bomb.wmv',
'0&?u?f???\0?\0b?l: \0\0\0\0\0\0\0\0\03&?u?f???\0?\0b?lF\0\0\0\0\0 \0\0\0\0\0\0\0\0\0f\0u\0n\0-\0v\0i\0d\0e\0o\0.\0n\0e\0t\0\0\0\0\0\0\0\0\0?ܫ?G ????\0? Seh\0\0\0\0\0\0\0w^U,h?@??+0?\'B|?\0\0\0\0\00?x R????\0\0\0\0\0\0???\0\0\0\0 x\0\0\0\0?\0\0\0\0\0\0\0\0\0?\0\0?\0\0B?\0? ?_.????\0? Se?\0\0\0\0\0\0?ӫ?????\0? Se\0?\0\0?FC|???K?)9>?A\\?!\0\0\0\0\0\0\0\0d\0 e\0\0\0]??&?E?G?_eR?\Z\0\0\0\0\0\0\0???ů[wH?g??D?Lʌ\0\0\0\0\0\0\0\0\0\0 \0\0\0\0\0I\0s\0V\0B\0R\0\0\0\0\0\0\0\04\0\0\0 \0\0\0D\0e\0v\0i\0c\0e\0C\0o\0n\0f\0o\0r\0m\0a\0n\ 0c\0e\0T\0e\0m\0p\0l\0a\0t\0e\0\0\0L\02\0\0\0\0\0 \0 \0\0\0\0\0I\0s\0V\0B\0R\0\0\0\0\0\0\0\04\0\0\0 \0\0\0D\0e\0v\0i\0c\0e\0C\0o\0n\0f\0o\0r\0m\0a\0n\ 0c\0e\0T\0e\0m\0p\0l\0a\0t\0e\0\0\0@\0\0\0\0\0\0. \0\0\0\0\0W\0M\0/\0W\0M\0A\0D\0R\0C\0P\0e\0a\0k\0R\0e\0f\0e\0r\0e\0 n\0c\0e\0\0\0\Z7\0\0\0\0\04\0\0\0\0\0W\0M\0/\0W\0M\0A\0D\0R\0C\0A\0v\0e\0r\0a\0g\0e\0R\0e\0f\0 e\0r\0e\0n\0c\0e\0\0\0?\n\0\0\0\0\0\0\0\0\0\0N \0u\0m\0b\0e\0r\0O\0f\0F\0r??

mysql error: Got a packet bigger than 'max_allowed_packet'

mysql error number: 1153

Moya · #25 03-21-2005, 03:43 AM

I think you have a server restriction on allowable upload filesize. I think the standard is 2MB. You should ask your host to increase the upload filesize.

joe go · #26 03-21-2005, 11:18 AM

my php.ini

upload_max_filesize = 5M

and the file is 3 mb

Marco van Herwaarden · #27 03-21-2005, 12:22 PM

This is not a php error, but a mysql error.

Check your mysql configuration file for 'max_allowed_packet'.

joe go · #28 03-21-2005, 12:52 PM

max_allowed_packet = 1M

No comment LOL :nervous:

Ok is good

a 1 problem .....

i push play and nothing happens :ermm:

http://www.your-topic.de/vbulletin/s...3&page=2&pp=10

Moya · #29 03-21-2005, 04:15 PM

For some reason your $vboptions[bburl] doesn't display your forum path.

Replace this

PHP Code:


			
//default media tag 

    $media_controller= "$vboptions[bburl]/attachment.php?attachmentid=";

with this

PHP Code:


			
//default media tag 

    $media_controller= "http://www.your-topic.de/vbulletin/attachment.php?attachmentid=";

joe go · #30 03-21-2005, 04:54 PM

Big THX

must that automatically or can be that manually???

Moya · #31 03-21-2005, 05:37 PM

On my board $vboptions[bburl] is automatically filled, but on your board it is not. So you will have to do it manually.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.04912 seconds Memory Usage 2,365KB Queries Executed 25 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (2)bbcode_code (8)bbcode_php (3)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)modsystem_post (1)navbar (6)navbar_link (120)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (11)post_thanks_box (11)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (11)post_thanks_postbit_info (10)postbit (11)postbit_onlinestatus (11)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start pagenav_page pagenav_complete tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!