Add-On Releases - gXboxLive - Xbox Live Leaderboard

What is it?
gXboxLive is a modification for vBulletin which allows you to display a Xbox Live Leaderboard for your users.

If you use this mod, please Mark as Installed, and if you really enjoy this mod, please Nominate for MOTM, and if you really really enjoy this mod, feel free to Support Developer! Thank you!

This version is for vBulletin 4, installation and stability has not been verified by the author. Visit this thread for vBulletin 3 compatible version.

[hr]-[/hr]
Support
[hr]-[/hr]I use my released mods daily, if I find an issue with them or add features for myself I will release updates. If there are significant bugs or simple feature requests I will do my best to release fixes. Some of my mods rely on fetching data from 3rd party websites, due to the unreliable results, my mods will require users to troubleshoot for themselves if they find the addon is not working for them specifically. I am offering my personal mods that work ok for me for you to use, I am sorry I do not have time to troubleshoot many user specific issues. Thank you for your understanding.

Features
[hr]-[/hr]

• Lists all ranked Gamertags, each updated once per day
• Optionally show unranked Gamertags (Original Xbox Users).
• Optionally allow Xbox Live message sending.
• Optionally allow Xbox Live friend requests.
• Optionally to choose how many User Names Per Page to display.
• Optionally require a minimum post count.
• Optionally to add a navbar link.*
• Optionally to add a miscellaneous quick link.*
• Choose how recently users must be active to be displayed.
• Optionally display leaderboard statistics
• Limit usergroups to display.
• Limit access by usergroup.
• Optionally display Forumhome stats
• Optionally display Memberinfo gamercard
• Optionally display Postbit leaderboard rank
• Monitors invalid gamertags, 5 attempts to verify the gamertag and then the users gamertag profile field is blanked to prevent further checks.
• Can link directly to a gamertag position in the leaderboard with gxboxlive.php?gt=Gamertag

*Depends on your vBulletin version and template configuration.

Installation
[hr]-[/hr]

1. Download the latest version and upload all files. Images go in the folders specific to your style.
2. Install the product.
3. Create a Single-Line Text Box User Profile Field for members to enter their Gamertag into.
   • Go to yourdomain.com/forumdir/admincp/?loc=profilefield.php%3Fdo%3Dadd
   • Single-Line Text Box
   • Continue
   • Title: Xbox Live Gamertag
   • Description: Enter your Xbox Live Gamertag
     [S]
   • Regular Expression: ^([A-Za-z0-9 ]+)?$[/S] (regex not required)
   • The rest of the settings is your prefrence.
   • Save
   • Look and see what the field id number is for Xbox Live Gamertag, example field25.
4. Fill in the gXboxLive configuration options, make sure to enter the field id for the newly created Xbox profile field above.
   • Go to yourdomain.com/forumdir/admincp/?loc=options.php%3Fdo%3Doptions%26dogroup%3Dgxbl_g roup
5. Send people to their user cp to enter their gamertags.
6. Wait up a few minutes for the gamertags to appear on the leaderboard.

Examples
[hr]-[/hr]Authors

• http://www.alliedtribalforces.com/gxboxlive.php
• http://www.thzclan.com/forums/gxboxlive.php
• http://www.planetside-universe.com/forums/gxboxlive.php

Others

• http://forums.3drealms.com/vb/gxboxlive.php
• http://digiex.net/xboxlive/
• http://www.alanwake.com/forum/gxboxlive.php

Google

• http://www.google.com/search?q=allin...oxlive.php+-gt

Changes
[hr]-[/hr]
vB4d - import product with Overwrite enabled, upload functions_gxboxlive.php and miner.gxboxlive.php

• Updates for April 18 gamercard changes.
• Uses DOMDocument PHP class now for parsing.

vB4c - import product with Overwrite enabled, upload gxboxlive.php, functions_gxboxlive.php and miner.gxboxlive.php

• Updates for January 20th gamercard changes. Thanks Travis641.

vB4b - import product with Overwrite enabled.

• Quick xbox.com url changes, there is no longer any way to directly link to add a friend.

vB4a - upload gxboxlive.php, miner.gxboxlive.php

• Quick fixes for errors mentioned, no other updates.

Copyright
[hr]-[/hr]gXboxLive, Copyright ? Ghryphen (https://github.com/ghryphen)
Please maintain copyrights in derivative works, thank you.

overLIB javascript library Copyright Erik Bosrup.

Thank you to msnhockey for helping with the vB4 version.

[MegaManSec]

Originally Posted by CAG CheechDogg

I know about XSS Vulnerabilities but how high risk is this if we don't add that fix of yours

Well, it's non-persistent, so it's not 100% harmful, but if somebody were to construct a URL, and get a mod, or an admin to click on it, they could steal your cookies, use it as there own, and they would be logged in as a mod / admin.
There are also more things they could do, exploit 0days in the browser etc.
I would recommend you apply my fix

[CAG CheechDogg]

Originally Posted by loaep

Well, it's non-persistent, so it's not 100% harmful, but if somebody were to construct a URL, and get a mod, or an admin to click on it, they could steal your cookies, use it as there own, and they would be logged in as a mod / admin.
There are also more things they could do, exploit 0days in the browser etc.
I would recommend you apply my fix

Thank you for the explanation loaep, just wanted to gain some knowledge about what the risks were. I see you work in web security and it's good to see that you offer us vBulletin modification security checks.

Again thank you so much for that bit of knowledge!

[EasyEazy]

Originally Posted by loaep

XSS Vulnerability Found.

gxboxlive.php:199: $pagenav = construct_page_nav($pagenumber, $perpage, $gxblcounts['usercount'], 'gxboxlive.php?do=getall', (!empty($sortfield) ? "&sortfield=$sortfield" : "") . (!empty($sortorder) ? "&sortorder=$sortorder" : ""));


OP's last activity was 2011 December, so I'm assuming it won't be fixed.



To fix it yourself, find these lines in gxboxlive.php

	$sortfield = $vbulletin->input->clean_gpc('r', 'sortfield', TYPE_STR);
	$sortorder = $vbulletin->input->clean_gpc('r', 'sortorder', TYPE_STR);

and add under it

	$sortfield = htmlspecialchars($sortfield);
	$sortorder = htmlspecialchars($sortorder);

Thank you for the update

[Hippy]

Im a little confused ..
you mean the total rep ?that always displays 0

if you have a place I can come by and peek..
this would be great to get it working ..
as far as the post thanks..
there could be ..would be great to add a fix for the thanks mod and this one..
pm me..

Originally Posted by CAG CheechDogg

Hippy, did you ever find a solution for the Reputation still showing (0) all the time?

I might of stumbled into something Hippy.

I use the Post Thank You Hack and it uses the following:

Varname $vbphrase[post_thanks_total_thanks]
Text Total Thanks

I changed that to something else and it reflected on the xbox live leaderboards as well changing the phrase for Reputation to what I changed it for the Post Thank You Hack as well. Could there be something connected here? I mean it shouldn't except for the phrase being the same, but it seems it is using the Post Thank You Hack's "reputation" phrase right?

[CAG CheechDogg]

@ Hippy

Correct Hippy, the Total Rep which always displays 0.

And as for my site just lick on my Signature or go to www.cagclan.com , you had already tried to help me figure out the blank page issue but we had no luck remember?

I have been looking trying to figure out the Total Rep issue myself with no success. I tried to see how it called for it from xbox.com but still no luck.

[CAG CheechDogg]

@ Hippy

If we could get the template/code from this person's website, http://forums.3drealms.com/vb/gxboxlive.php, we might find a fix for the "total reputation" bug, it seems to be working on his site.

[Hippy]

Originally Posted by CAG CheechDogg

@ Hippy

If we could get the template/code from this person's website, http://forums.3drealms.com/vb/gxboxlive.php, we might find a fix for the "total reputation" bug, it seems to be working on his site.

I pmed him... will see what he says :up:

[CAG CheechDogg]

Ok everyone this is very crazy! If you guys don't have your stars showing under "Reputation" it's because xbox.com had decided to once again change the location of the stars png image file.

To fix this go and open your gxbl_headinclude template and replace the url of the image from this:

http://gamercard.xbox.com/Content/Ga...Card_Icons.png

To this:

http://live.xbox.com/content/gamerca...Card_Icons.png


If you also added this to your headinclude template do the same changes.

[CAG CheechDogg]

Originally Posted by Hippy

I pmed him... will see what he says :up:

Good stuff Hippy, I just ran into something I don't know if it was just me that reverted the templates or if indeed xbox.com again switched the urls of the stars png for the Repuation, but I posted it above just in case they did switch it again.

Hopefully he replies back. If he does you should ask him for zipped package of all the files for the mod, good idea? Then we can compare them to ours.

[Hippy]

Originally Posted by CAG CheechDogg

@ Hippy

Correct Hippy, the Total Rep which always displays 0.

And as for my site just lick on my Signature or go to www.cagclan.com , you had already tried to help me figure out the blank page issue but we had no luck remember?

I have been looking trying to figure out the Total Rep issue myself with no success. I tried to see how it called for it from xbox.com but still no luck.

so what fixed the blank page ?