Check out the FREE chatroom mod for IPB 3.x

D21-Shoutbox 1.2.1

Category: Full Modifications
Compatibility: Invision Power Board 2.1
Demo:


Quick Description:
D21-Shoutbox is the fully-featured Shoutbox available for IPB with tons of features!

Description:
Modification Description
D21-Shoutbox is the fully-featured Shoutbox available for IPB.
There is a ton of features, admin options, settings, and more!

Files Affected

• index.php
• sources/ipsclass.php
• sources/acp_loaders/acp_content.php
• sources/acp_loaders/acp_pages_content.php
• sources/classes/class_display.php
• sources/classes/class_session.php
• cache/lang_cache/en/lang_online.php
• Admin CP To Edit Skin Template(s)

Modification History

• 1.2.1
  
  • Updated installer to use new paths (it now loads properly).
  • Fixed 3 major security holes (thanks mohamed!)

• 1.2
  • Fixed major security hole(s) that allows password hash's & salt's to be retrieved via UNION SELECT in MySQL.
• 1.1
  • Fixed Auto-clearing global shout field after shouting bug.
  • Fixed shouter's name to use members display name instead of actual username.
  • Fixed all members in online list say they are 'Viewing the Shoutbox' bug.
  • Fixed BBCode not parsing when editing shouts.
  • Fixed char-set type to use the one set to be used by settings.
  • Fixed 'Fatal Error' bug when not using global iframe for global shoutbox.
  • Fixed 'usort()' error in admin section for the shoutbox.
• 1.0
  • First initial release of modification

View Modification

Yeah I guess your right the more mods Deam upgrades the better.

I heard there is a SQL Injection security bug with a Shoutbox produced by Dean. Is this version completely safe?

i downloaded the new xml file after gettin sql errors on install.. and that new xml file worked first time..

Yeah I have this mod installed and I am having no problems what so ever.

is this version safe? i found the file in broken mods?

i might add it to my board im just wondering on its past

It is safe and secure. The only problem people were having with it was the installer was having problems. So just go under user contributed files (after downloading the shoutbox) and download my XML file. The XML file is a fixed version of Dean's file and it gets rid of several SQL problems. I'm glad i was able to help and that people are using the file.

I have no problems even though I need used your contributed files.

so i gotta download ur file or what (saiyen)?

Ok, first downoad he Shoutbox as usual. THEN download my file from user contributed files. Follow the insturctions in the included readme, and then follow through with Dean's Shoutbox instructions. Simple

Why do some people have problems with it and some don't like me?

Because of different versions of PHP

Bod, I think he wasn't talking about the installer, I think he was talking about following instructions I don't know, only simpler way to make instructions:

1: Download D21-Shoutbox 1.1
2: Click User Submited Content
3: Download My File.
4: Follow My instructions first.

just playing with ya'll, but no. that's seriously all ya'll have to do.

-wonders why, since dean was on, he wasn't contacted and that Dean hasn't repaired this mod himself. Realizes how busy he must be and then dismisses the thought-

I have up-graded my board from v2.1.4 to v2.1.5 and the shoutbox works fine but I have a little error now, when I click on the online list it says every member is the shoutbox even myself while I am looking at the online list and when you click on a members name in the shoutbox at the main page you get also an error "fault on the page" in the left bottum corner of your brouwser (where you see "ready")

I hope dean will fix this for this version (2.1.5)

windsaiyen, what if I have no problems with Dean's shoutbox (planning to upgrade to 2.1.5 eventually). I have it working wonderfully on 2.1.4. Do I still need to re-run the installer with your file or will I be fine without your file and just keep using Dean's?

I'm asking for security reasons. That's if there are security concers.

Thanks!

This post has been edited by Bamfer: Mar 8 2006, 01:24 PM

No, see Dean did some stuff when writing the code that some versions of php, or SQL didn't agree with, so all I did was rewrite the codes a little to make php and sql not hve problems with them. So if you had no problem installing it and it works just fine, than no, you do not need the fixed XML file