Major Additions - microAUCTIONS (Auction Classifieds)

*** Link Removed ***

[MaryTheG(r)eek]

For those who're interesting for Classifieds rather than Auctions, I'll release microCLASSIFIEDS on Sunday or max on Monday as I need a day to finish microAUCTIONS first of all.

Maria

[bigtime]

Excellent! Thanks.

[Crazyfruitbat]

I'm afraid I had the same uninstall issues too

[MaryTheG(r)eek]

*** ATTENTION ***

All prior posts are reffering to Alpha version.
From here and then are for the stable Beta 4.1.0

Maria

[micheal332001]

Originally Posted by BBR-APBT

Very Nice I would rather have the Classifieds with out the auctions. Still very nice.

Rated and nominated even though I have no use for it.

Originally Posted by zelnik

Hi Maria,

Great mod and any idea when the Pro version will be available?

Since vbclassifieds looks like it will not be updated for vb4 I believe there is a big market place for a classifieds that isn't expensive like photopost classifieds

Originally Posted by ndahiya

Microhellas, great mod, but again, too heavy for my intended use. i am looking for a basic classifieds addon (no need for auctions, payments etc). the pro version is a good idea, but it would be a bit like using a hammer to kill a fly. wonder if you plan to release a classifieds only lite version. i do not mind making a (financial) contribution if that is the bottleneck...

ndahiya

Maria's old classifieds script will be updated to vb4.0 soon as this is being done now.

As for the members that have said that maria's code is heavy and horrable is out of line as she works hard to give everyone some great add-ons to there sites.
When a coder heres things like this for there hard work puts them down and makes them think twice about making mods for release here.

People here or on any other site should be thinking how much work goes into making these scripts and thanking the coders that make these for you.

Most of the members that put add-ons down dont even know how to code,
they cannot code even in html not alone php or java.

So say thankyou to members that make these scripts for your use as they have put in alot of time to make these for you.

[micheal332001]

By the way Maria great script i will be using this for my site.

[kf4eok]

Just what I have been looking for, I just wish the Pro verson was out.
Thanks

[kf4eok]

I have a question. When I go to post a auction, then chose a category there is nothing there. How do I make the category list?

[MaryTheG(r)eek]

Originally Posted by kf4eok

I have a question. When I go to post a auction, then chose a category there is nothing there. How do I make the category list?

From your admincp You can add unlimited level categories.

Maria

[MaryTheG(r)eek]

I'm so happy to say, that someone from IP: 77.54.237.148 is wasting his time to crash my microAUCTIONS in my demo installatin. Below you'll find some of his attempts:

SELECT * FROM vb4_microauctions_items WHERE active=1 AND sold=0 AND categoryid IN (5, 6, 7, 8, 9, 10, 11, 12, 13) AND (keywords LIKE '';$r = select * from vb4_user;$rr=mysql_fetch_array($r);print_r($rr);%' OR keywords LIKE '%';$r = select * from vb4_user;$rr=mysql_fetch_array($r);print_r($rr);%' OR keywords LIKE '%';$r = select * from vb4_user;$rr=mysql_fetch_array($r);print_r($rr);') ORDER BY ends ASC;

SELECT * FROM vb4_microauctions_items WHERE active=1 AND sold=0 AND categoryid IN (5, 6, 7, 8, 9, 10, 11, 12, 13) AND (keywords LIKE '';select * from vb4_user;mysql_fetch_array%' OR keywords LIKE '%';select * from vb4_user;mysql_fetch_array%' OR keywords LIKE '%';select * from vb4_user;mysql_fetch_array') ORDER BY ends ASC;

SELECT * FROM vb4_microauctions_items WHERE active=1 AND sold=0 AND categoryid IN (5, 6, 7, 8, 9, 10, 11, 12, 13) AND (keywords LIKE ';';select * from vb4_user;%' OR keywords LIKE '%;';select * from vb4_user;%' OR keywords LIKE '%;';select * from vb4_user;') ORDER BY ends ASC;

SELECT * FROM vb4_microauctions_items WHERE active=1 AND sold=0 AND categoryid IN (5, 6, 7, 8, 9, 10, 11, 12, 13) AND (keywords LIKE '';select * from vb4_user;%' OR keywords LIKE '%';select * from vb4_user;%' OR keywords LIKE '%';select * from vb4_user;') ORDER BY ends ASC;

SELECT * FROM vb4_microauctions_items WHERE active=1 AND sold=0 AND categoryid IN (1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91, 92, 93, 94, 95, 96, 97, 98, 99, 100, 101, 102, 103, 104, 105, 106, 107, 108, 109, 110, 111, 112, 113, 114, 115, 116, 117, 118, 119, 120, 121, 122, 123, 124, 125, 126, 127, 128, 129, 130, 131, 132, 133, 134, 135, 136, 137, 138, 139, 140, 141, 142, 143, 144, 145, 146, 147, 148, 149, 150, 151, 152, 153, 154, 155, 156, 157, 158, 159, 160, 161, 162, 163, 164, 165, 166, 167, 168, 169, 170, 171, 172, 173, 174, 175, 176, 177, 178, 179, 180, 181, 182, 183, 184, 185, 186, 187, 188, 189, 190, 191, 192, 193, 194, 195, 196, 197, 198, 199, 200, 201, 202, 203, 204, 205, 206, 207, 208, 209, 210, 211) AND (location LIKE '<script>alert('Hello World!')</script>%' OR location LIKE '%<script>alert('Hello World!')</script>%' OR location LIKE '%<script>alert('Hello World!')</script>') ORDER BY ends ASC;

SELECT * FROM vb4_microauctions_items WHERE active=1 AND sold=0 AND categoryid IN (5, 6, 7, 8, 9, 10, 11, 12, 13) AND (keywords LIKE '';select * from vb4_user%' OR keywords LIKE '%';select * from vb4_user%' OR keywords LIKE '%';select * from vb4_user') ORDER BY ends ASC;

SELECT * FROM vb4_microauctions_items WHERE active=1 AND sold=0 AND categoryid IN (5, 6, 7, 8, 9, 10, 11, 12, 13) AND (keywords LIKE '';drop table vb4_microauctions_items%' OR keywords LIKE '%';drop table vb4_microauctions_items%' OR keywords LIKE '%';drop table vb4_microauctions_items') ORDER BY ends ASC;

...and many others. Of course my demo is still active, but right now I'll get any legal action against him. If someone wants to try security, lets do it on his site.

Maria