The Arcive of Official vBulletin Modifications Site.

vBulliten 3.0.7 Unexistant File Edit · **Released**: 02-24-2005

Hello all, I am installing vBAdvanced Warning System (the latest in the download thread) on vBulliten 3.0.7 and when the file edit comes for private.php it tells you to do this:

Code:

In the same file, find:

		// check for valid users
		$pm['recipients'] = vbstrtolower(trim($pm['recipients']));
		
Right below that, add:

		if (!$warn_opts['collector']=='' OR !$warn_opts['collector']=='0')
		{
			if (!$warn_opts['automatic_warner']=='')
			{
				$w=$warn_opts['automatic_warner'];
				$autowarner=$DB_site->query_first("select username from ".TABLE_PREFIX."user where userid=$w");
				$autowarner=vbstrtolower($autowarner['username']);
			}
			if (!$warn_opts['warner']=='')
			{
				$w=$warn_opts['warner'];
				$warner=$DB_site->query_first("select username from ".TABLE_PREFIX."user where userid=$w");
				$warner=vbstrtolower($warner['username']);

			}
			$w=$warn_opts['collector'];
			$collector=$DB_site->query_first("select username from ".TABLE_PREFIX."user where userid=$w");
			$collector=vbstrtolower($collector['username']);

		}

but this is the actual code in the private.php file.

Code:

		// check for valid users
		$pm['recipients'] = trim($pm['recipients']);

		if ($pm['recipients'] == '')
		{
			eval('$errors[] = "' . fetch_phrase('pminvalidrecipient', PHRASETYPEID_ERROR) . '";');
		}
		else if (preg_match('/(?<!&#[0-9]{3}|&#[0-9]{4}|&#[0-9]{5});/', $pm['recipients'])) // multiple recipients attempted
		{
			$users = preg_split('/(?<!&#[0-9]{3}|&#[0-9]{4}|&#[0-9]{5});/', $pm['recipients'], -1, PREG_SPLIT_NO_EMPTY);
			foreach ($users AS $recipient)
			{
				$recipient = trim($recipient);
				if ($recipient != '')
				{
					$recipients["$recipient"] = addslashes(htmlspecialchars_uni($recipient));
				}
			}
		}

Should I just put it to make this:

Code:

		// check for valid users
		$pm['recipients'] = trim($pm['recipients']);
		if (!$warn_opts['collector']=='' OR !$warn_opts['collector']=='0')
		{
			if (!$warn_opts['automatic_warner']=='')
			{
				$w=$warn_opts['automatic_warner'];
				$autowarner=$DB_site->query_first("select username from ".TABLE_PREFIX."user where userid=$w");
				$autowarner=vbstrtolower($autowarner['username']);
			}
			if (!$warn_opts['warner']=='')
			{
				$w=$warn_opts['warner'];
				$warner=$DB_site->query_first("select username from ".TABLE_PREFIX."user where userid=$w");
				$warner=vbstrtolower($warner['username']);

			}
			$w=$warn_opts['collector'];
			$collector=$DB_site->query_first("select username from ".TABLE_PREFIX."user where userid=$w");
			$collector=vbstrtolower($collector['username']);

		}

		if ($pm['recipients'] == '')
		{
			eval('$errors[] = "' . fetch_phrase('pminvalidrecipient', PHRASETYPEID_ERROR) . '";');
		}
		else if (preg_match('/(?<!&#[0-9]{3}|&#[0-9]{4}|&#[0-9]{5});/', $pm['recipients'])) // multiple recipients attempted
		{
			$users = preg_split('/(?<!&#[0-9]{3}|&#[0-9]{4}|&#[0-9]{5});/', $pm['recipients'], -1, PREG_SPLIT_NO_EMPTY);
			foreach ($users AS $recipient)
			{
				$recipient = trim($recipient);
				if ($recipient != '')
				{
					$recipients["$recipient"] = addslashes(htmlspecialchars_uni($recipient));
				}
			}
		}

Thanks, Travis.

EDIT: I just ignored the difference and pasted it where it should have. I dont notice any errors yet. =D

TruthElixirX · #2 02-25-2005, 12:03 AM

I did the same thing and haven't noticed any errors yet either. So I don't think it matters.

Delphiprogrammi · #3 02-25-2005, 07:20 PM

same here private.php didn't changed in the latest vb release however be sure you have the security patch for the XSS exploit in private php see announcements forum here for a list of files that has been changed in vb3.0.7 you can go here

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.04115 seconds Memory Usage 2,212KB Queries Executed 16 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (3)bbcode_code (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)modsystem_post (1)navbar (6)navbar_link (120)option (3)post_thanks_box (3)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (3)post_thanks_postbit_info (2)postbit (3)postbit_onlinestatus (3)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!