vBSupport v2.0.0 Beta 2

vbSupport v2.0.0 BETA 2 by CMX (http://www.cmgsccc.com)
Official Homepage - http://www.vbplaza.com


v1.1 of this modification was found to contain an SQL injection. If you run v1.1 of this modification, you are hereby advised to update to v1.1a of this modification. To update from v1.1 to v1.1a, grab the v1.1a ZIP and overwrite the vBSupport.php file on your server with the new version.

Note that while no other vulnerabilities were noticed by vBorg Staff, this does not mean that such things do not exist. vBorg Staff fixed the one SQL injection according to these rules. Any other fixes that may be needed now or in the future are left to the original author.

-- vBorg Staff


Welcome to the latest hack by CMX for your vBulletin Message Board. This is a fully featured Ticket based support system for you website. If you had installed the older version of vBSupport v1.1, then you already have an idea what this sytem is all about.

Basically, this system will allow your Forum Members to create new support tickets using the same login as your vBulletin forums login for your users. There have been many improvements from the older v1.1 vBSupport System I made a while back.

New Features for v2.0.0+:
1) Permission Checks are better implemented and are more useful now.
2) AJAX Open/Closing tickets by double clicking the thread icon when listing tickets.
3) AJAX Ticket Title editing just like the forums Thread editing as well.
4) Post Quick Reply is now using the AJAX system where possible to post replies to tickets.
5) You can now Edit posts inline using the AJAX system as well.
6) Inline Moderation when listing tickets includes Delete Ticket, Open Ticket, Close Ticket.
7) You can now delete individual Posts from Tickets via the Inline Moderation as well.
8) MASSIVE performance load improvements. On my forums with 200,000 members, it would take 4 seconds to view a ticket due to a very strenuous query. Now it loads tickets in 0.13 seconds.
9) Category Administration has now been moved into the Admin CP instead of on the vbSupport page itself.
10) Everything should be fully phrased now as well.

Other Features:
1) IF you have installed the older vBSupport version, it will auto uninstall it for you. (It will NOT delete the old tickets!)
2) Admin CP -> vbSupport Maintenance -> Import Old Tickets is now in and working to import the old tickets if you had vBSupport installed.
3) A ton of permissions per Usergroup to set the settings up the way you want them.

vbSupport v2.0.0 BETA 2 Updates:
1) Bugfix: Quick Reply functions properly when you have the Quick Reply option enabled for Yes - Click Required.
2) Bugfix: Normal Reply/Closed button is there when viewing a ticket.
3) Bugfix: Admin CP Deleting a ticket now functions properly.
4) Bugfix: AJAX Edit feature does not display an alert(postid) anymore.
5) Bugfix: Active On/Off works for each category when enabled/disabled from the Admin CP.
6) Bugfix: Usergroup Permissions are now working for Allowed Usergroups & Denied Usergroups.
7) Bugfix: Changed some templates that linked to the wrong PHP files.
8) Bugfix: New Thread template is cleaned up a bit and it displays properly in Firefox too now.
9) Bugfix: Active phrase now is installed as a vbSupport phrase.


PLEASE NOTE: This is the very first release of vbSupport 2.0.0. Which means that this is a BETA release. I will try to correct any issues found ASAP.

I have vbSupport v2.0.0 BETA 1 running on my production site at www.cmgsccc.com, so I should be able to find most bugs since there are over 200,000 registers members there and it will get put to the test quite a bit. However, if you find something, please post it here.

By installing this BETA version, it will uninstall the previous vBSupport system automatically. It will leave the old ticket tables upon installation. It should import the older Ticket Categories that you had before as well.

I would also like to recommend that you backup your MySQL database, just in case a mishap occurs as this is BETA.

ALSO: The older version vBSupport v1.1 will be here for download until v2.0.0 comes out of BETA. vBSupport v1.1 is NOT in the BETA stage, only vbSupport v2.0.0 is in the BETA stage.

Upgrading Instructions From vBSupport v1.x
NOTE: These are ONLY applicable if you are upgrading from vBSupport v1.x!

1) Delete all of the older vBSupport files from your server. If you are not sure which files they are, the vBSupport v1.1 is still available for download here so you can download that and look at the files in there.

2) Upload all of the files in the upload folder to your forums ROOT folder. Make sure that if it asks about any files, that you set Overwrite to overwrite all files as well.

3) In your Admin CP, goto Plugin System -> Manage Products -> Add/Import Products at the bottom -> Select the XML file that you have downloaded in the package named product-vbsupport.xml -> Set Allow Overwrite to YES -> Import.

4) Perform the template edits below and you have vbSupport v2.0.0 up and running!

5) Refresh your forums Admin CP page.

6) Admin CP -> vbSupport Maintenance -> Import Old Tickets if you want to save the older tickets. Otherwise you can skip this feature.


New Installation Instructions:

1) Upload all of the files in the upload folder to your forums ROOT folder. Make sure that if it asks about any files, that you set Overwrite to overwrite all files as well.

2) In your Admin CP, goto Plugin System -> Manage Products -> Add/Import Products at the bottom -> Select the XML file that you have downloaded in the package named product-vbsupport.xml -> Set Allow Overwrite to YES -> Import.

3) Perform the template edits below and you have vbSupport v2.0.0 up and running!


Template Edits:

A) Template 'navbar':

Find:

		<td class="vbmenu_control"><a href="calendar.php$session[sessionurl_q]">$vbphrase[calendar]</a></td>

Add Below:

<!-- vbSupport start -->
			<if condition="$vboptions['vbsupport_enabled']"><td class="vbmenu_control"><a href="vbsupport.php$session[sessionurl_q">$vbphrase[vbsupport_title]</a></td></if>
<!-- vbSupport end -->

B) Template 'postbit_legacy':

Find:
[code]
<if condition="$show['postcount']">#<a href="showpost.php?$session[sessionurl]p=$post[postid]&amp;postcount=$post[postcount]" target="new" rel="nofollow" id="postcount$post[postid]" name="$post[postcount]"><strong>$post[postcount]</strong></a></if>
[code]

Add Above:

<!-- vbSupport start -->
			<if condition="$show['ticketcount']">#<a href="vbsupport.php?$session[sessionurl]do=viewpost&amp;pid=$post[postid]&amp;postcount=$post[postcount]" target="new" rel="nofollow" id="postcount$post[postid]" name="$post[postcount]"><strong>$post[postcount]</strong></a></if>
<!-- vbSupport end -->

C) Template 'postbit':

Find:

			<if condition="$show['postcount']">#<a href="showpost.php?$session[sessionurl]p=$post[postid]&amp;postcount=$post[postcount]" target="new" rel="nofollow" id="postcount$post[postid]" name="$post[postcount]"><strong>$post[postcount]</strong></a> &nbsp;</if>

Add Above

<!-- vbSupport start -->
			<if condition="$show['ticketcount']">#<a href="vbsupport.php?$session[sessionurl]do=viewpost&amp;pid=$post[postid]&amp;postcount=$post[postcount]" target="new" rel="nofollow" id="postcount$post[postid]" name="$post[postcount]"><strong>$post[postcount]</strong></a> &nbsp;</if>
<!-- vbSupport end -->

ENJOY!!

-CMX

[Delphiprogrammi]

Originally Posted by Lionel

I managed to get attachments to display, but I am having a hard time with editpost (when greater than post id#1)

I am also having a hard time with permissions. I thought of disabling editpost but it goes thru

look at newattachment.php and attachment.php if the editpost method is used vBulletin wants a postid ($postid) i think you somehow need to pass that variable in the newattachment template there's a hidden variable called edittpost (coming from a form) so i guess something like

PHP Code:

$vbulletin->input->clean_gpc('p','editpost',TYPE_BOOL); 


would be needed.Also in the editpost method you need to pass this to newattachment.php?$session[sessionurl]&p=$postinfo[postid]&editpost=1&postsstarttime=$poststarttime&posthash =$posthash

in the admincp file (vbsupport.php) are to manny security holes $_REQUEST values being used directly(they must be cleaned).The database being queried directly etc etc
this needs a start from scratch otherwise some holes will manage to slip in

[Lionel]

@delphiprogram Agreed! I gave up on this. The more I am fixing, the more other problems pop up.

[Lionel]

For those who are having problems with deleting a post, this seems to do the job for me. Not the most elegant, but hey it seems to work.

in plugins/vbsupport_inlinemod.php replace the foreach loop with

PHP Code:

        $post['firstpostid'] = false;
        $gotothread = true;
        foreach ($postarray AS $postid => $post)
        {
            if($post['firstpostid'] == $post['postid'])
            {
            $postman =& datamanager_init('Ticket_Thread', $vbulletin, ERRTYPE_SILENT, 'ticketpost');
            }else{
            $postman =& datamanager_init('Ticket_Post', $vbulletin, ERRTYPE_SILENT, 'ticketpost');
            }
            $postman->set_existing($post);
            $postman->delete($post['postid'], $post['firstpostid'], array(
                'userid' => $vbulletin->userinfo['userid'],
                'username' => $vbulletin->userinfo['username'],
                'reason' => $vbulletin->GPC['deletereason'],
                'keepattachments' => $vbulletin->GPC['keepattachments']
            ));


            unset($postman); 


[Delphiprogrammi]

ey....

PHP Code:

$show['attachments'] = (vbsupport_can_moderate('canviewattachments')) ? true : false; 


but still they won't display and you get the "no permissions" screen when clicking any attachment.While attachments do work fine in 1.1a

[Lionel]

Attachments display for me ... I don't remember what I did but they display just fine

[Lionel]

I did a beyond compare to view my changes. I am very busy, so I am putting this up like that.

Here is what I found in the main file.

1-Replace below with $threadid

$getpost = $vbulletin->db->query_first("
SELECT postid
FROM " . TABLE_PREFIX . "vbs_ticket_post
WHERE threadid = $threadinfo[threadid]
ORDER BY dateline LIMIT 1

replace below with

$attachurl = "p=$postinfo[postid]";

$attachurl = "t=1";
$newpost_attachmentbit = prepare_newpost_attachmentbit();
eval('$attachmentoption = "' . fetch_template('newpost_attachment') . '";');

$attach_editor['hash'] = $postinfo['postid'];
$attach_editor['url'] = "newattachment.php?$session[sessionurl]p=$postinfo[postid]&amp;editpost=1&amp;poststarttime=$poststarttime&a mp;posthash=$posthash";
}
else
{
$attachmentoption = '';
}

replace below with

$newpost['message']

$editorid = construct_edit_toolbar(
$postinfo['message'],
0,
'',
true,

replace below with (twice)


$attachurl = "f=2";

$attachurl = "t=1";
$newpost_attachmentbit = prepare_newpost_attachmentbit();
eval('$attachmentoption = "' . fetch_template('newpost_attachment') . '";');

$attach_editor['hash'] = $foruminfo['forumid'];
$attach_editor['url'] = "newattachment.php?$session[sessionurl]f=$foruminfo[forumid]&amp;poststarttime=$poststarttime&amp;posthash=$po sthash";

And if you do my change above, all the bugs are done as far as I could tell. If someone finds more, then let me know.

[DarkLord7854]

Hey,

Was wondering if there's a simple way I can add another drop-down menu category selection, or add a small input box which would add whatever text was put into it and make it the topic/ticket description, or add the text after the title seperated by a hyphen?

Ninja Edit:
Can't download attachments, says permissions ain't set right even though they are >.<

[Takamine334]

So, users can create a ticket. However, when submitting, it says they are not authorized to view the page. If they go to their ticket listings, it shows 1, but they cannot see the ticket.

[Takamine334]

the Quick Reply is very small. How do I make it the size of a normal quick reply?

[Solja-Mike]

Is there any type of reporting feature for this addon?