Top 'X' Stats

[high]Security Fix: The uploaded version fixes all issues concerned with the recent security vulnerabilities. Sorry I haven't been around I don't really do anything plugin wise anymore.[/high]

Oh this version also works with all current version of vB 3.6. So feel free to use it on that version.

- InfiniteWebby

The low down

Well this is the vB 3.5.0 version of my hack. It is much the same as the original except that for some added stuff that I never released

Basically what it does is show the Top 'X' (edited via the vBulletin options in the admincp) newest members, top posters and newest replies on the Forumhome.

So what's new in this version?

Well for one all settings, which include amount of stats to show on forumhome and the extended page, thread title and username truncation, excluded forums and 'new' and 'old' thread prefixes.

Secondly there is now an extra page where you are able to choose exactly how many stats to show.

And lastly and most importantly it only takes 3 simple steps to install =)

What's on the horizon?

- More "stat blocks" including top reputation and top thread based on views or replies. If you have a suggestion please let me know, prefferably via pm.
- Proper can view other users threads permissions. At the moment I cannot think of how to block other people threads while still showing your own without totally re-writing the hack =(.

Version 1.2.1 is a re-release with who's online additions as well as some template changes. So you are best to reinstall the whole thing all over again.

So anyway enjoy and click install.

[desiforums]

ya worked for me

[desiforums]

but i want to know how can put it on the top of the forum its at the bottom anyone knows????

[Shazz]

Originally Posted by desiforums

but i want to know how can put it on the top of the forum its at the bottom anyone knows????

In your "navbar" template
Add to the very bottom

PHP Code:

    <if condition="$show['topXstats']">
    $topXstats
    </if> 


-Hope it works

[cbr929rrerion]

this is STILL a security risk..

Forum was redirected again today...

Yes I have the newest version and it still is insecure..

[DementedMindz]

Originally Posted by cbr929rrerion

this is STILL a security risk..

Forum was redirected again today...

Yes I have the newest version and it still is insecure..

report it and have the admins look at it.

[murrtex]

Originally Posted by cbr929rrerion

this is STILL a security risk..

Forum was redirected again today...

Yes I have the newest version and it still is insecure..

delete and forget this hack..

and try this
https://vborg.vbsupport.ru/showthread.php?t=122986

be sure you will be glad

[Shazz]

I can't figure out how the crap people redirect This?!!
Im removing it

[Paul M]

Originally Posted by DementedMindz

report it and have the admins look at it.

I had a look at this tonight.

If this is installed from scratch then it cannot be exploited.

However, because of the the way the fix has been implemented - it is possible that it may still be exploitable if someone updated their older version to the new code, and they had customised the templates, but did not revert or re-edit those templates.

This is because the older versions used $getstats_thread[title], the fix uses $getstats_thread[titletrimmed] - but the old variable is still available, and if displayed by an old template, will still cause a redirect.

The best workaround to this is to make sure you revert any old topXstats templates. The author should fix this properly by making sure that the old variable $getstats_thread[title] is either removed, or also made 'harmless' by using htmlspecialchars().

[DementedMindz]

yeah I havent had a problem Paul since the fix but others are claiming they are so I told them to report it if so.

[apdcanari]

Hello,

Thread preview, it is possible (lasts threads) ?

Tks,

C?dric