[I.G.O.T.A.]

Where and how would this problem show up in what kind of search:

In vBulletin version 4.0.6 and above, Internet Brands changed the way
search results were being shown.
Hidden content may be exposed unless you perform this file edit.

[DragonByte Tech]

Originally Posted by iraqiboy90

No, it doesn't happen 100% of the time.
Also, another problem;
The path for the like/thank statistics is "unknown" for the WOL.
This

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

and this

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

basically the main one as well.

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Those following plugins are already enabled:
online_location_process
online_location_unknown

WOL is not supported at this time, those plugins are placeholders

Originally Posted by IGOTASTi

Is there a 3.1.4 version already? Someone told me that.

You can always see the latest version @ our website

Originally Posted by IGOTASTi

Where and how would this problem show up in what kind of search:

In vBulletin version 4.0.6 and above, Internet Brands changed the way
search results were being shown.
Hidden content may be exposed unless you perform this file edit.

Searches that display results as posts, as opposed to as threads.



Fillip

[Milobil]

Is it possible to display directly the likes/thanks given/received on postbil without having to click on the arrow which displays that ?

[DragonByte Tech]

Turn on the "Disable Postbit Stats Collapse" setting in the vBulletin Options.


Fillip

[Milobil]

Thanks for the answer.

[black666]

I've downloaded and imported the german translation but it seems like there are some hardcoded "Thanks" and "Likes" phrases:



The postbit stats and also the stats under every post always say "Thanks" and "Likes". I've searched in the Phrase Manager but couldn't find anything. The templates also seem to not use any phrases for those 2 words. How can I translate just the phrase "Thanks" and "Likes"?

[civil78]

Is there any integration feature or patch for CMS Articles?

[DragonByte Tech]

Originally Posted by black666

I've downloaded and imported the german translation but it seems like there are some hardcoded "Thanks" and "Likes" phrases:



The postbit stats and also the stats under every post always say "Thanks" and "Likes". I've searched in the Phrase Manager but couldn't find anything. The templates also seem to not use any phrases for those 2 words. How can I translate just the phrase "Thanks" and "Likes"?

These can be translated either via the vBPhrases (as of v3.1.0 Gold) or by renaming the buttons in the Button Management screen. That screen also has links to the phrases to translate.

Originally Posted by civil78

Is there any integration feature or patch for CMS Articles?

Unfortunately not, no


Fillip

[DragonByte Tech]

Advanced Post Thanks / Like v3.1.4 Patch Level 1

New Features

• The button titles can now be translated in the same way Action Text etc can be translated

Bugfixes

• Compact Style did not show button click counts for buttons the viewing user could not click
• The buttons should now once again respect their "disabled" settings
• Advanced Post Thanks / Like was not compatible with Threaded or Hybrid thread display modes

Fillip

[MagicPID]

I'd like to point out a major security flaw in this. If you have sections on your forum that are hidden from other users and you are tagged/mentioned/quoted/post liked in it everyone will be able to see the title of the thread.

For example:

User 1 is VIP
User 2 is not

There is a thread by the name of "Thread Title" in a VIP section that user 1 posts. If another user that is VIP likes that post, user 2 will be able to go to their profile and see the title of that thread in the likes section.

---------
This may not be a big deal for some people but on my forum this makes the mod completely unusable. I can't just remove the sections from the profile either because we use the like/dislike feature for rep too and we wouldn't be able to see if people are mass repping each other.

DragoByte Tech- If you could work out a way to prevent users from seeing thread titles that isn't in their allowed sections I'd really appreciate it.

[DragonByte Tech]

There are forum permission checks in place that prevent people from seeing the content if you either can't view the forum, can't view threads in that forum or you do not have the password for that forum entered in their browser.

If the viewing user does not meet these criteria, they will see "-=Hidden Content=-" instead (same as if the post is hidden behind a HIDE tag).

While I appreciate you taking the time to post improvement requests for our mods, your post gives off the impression there is an actual security concern in this mod when, from multiple reports and tests, this is not the case.


Also, according to vBulletin.org you have not downloaded the product - was this posted in the wrong thread (vB3 vs vB4)?

If you're running the Pro version, please do be aware that we cannot offer support for the Pro version here on vBulletin.org.



Fillip

[MagicPID]

Originally Posted by DragonByte Tech

There are forum permission checks in place that prevent people from seeing the content if you either can't view the forum, can't view threads in that forum or you do not have the password for that forum entered in their browser.

If the viewing user does not meet these criteria, they will see "-=Hidden Content=-" instead (same as if the post is hidden behind a HIDE tag).

While I appreciate you taking the time to post improvement requests for our mods, your post gives off the impression there is an actual security concern in this mod when, from multiple reports and tests, this is not the case.


Also, according to vBulletin.org you have not downloaded the product - was this posted in the wrong thread (vB3 vs vB4)?

If you're running the Pro version, please do be aware that we cannot offer support for the Pro version here on vBulletin.org.



Fillip

I've used the mod for awhile on vb4 I must have just forgotten to click installed, I've done it now. I'm going to PM you a pdf file that one of my members made with some more information regarding it because my forum doesn't show the "-=Hidden Content=-" message.

I apologize for seeming as it is a big security issue because on my forum it is and I wasn't under the impression that it usually says "-=Hidden Content=-".

[MagicPID]

Originally Posted by DragonByte Tech

Here's a couple of screenshots from our own forum:

https://www.dropbox.com/s/8jwhklmecj...2021.15.29.png
https://www.dropbox.com/s/nokhv7rm7t...2021.15.56.png

The first screenshot is taken from my account, where I clicked a button for a thread that's in our private staff room (thread title is harmless enough )

The second screenshot is taken as a guest, you can see it yourself by going to Mokonzi's profile here: http://www.dragonbyte-tech.com/members/666-mokonzi/
(Ignore his user ID, he's actually the nicest guy you'll ever meet in your entire life)

If this does not occur on your forum, then please double-check that you have set either Can View Forum or Can View Thread Content to No for all user groups the member in question is a member of.

Also check that there are no Access Masks running for these members.

Fillip

Ah okay the issue must be with the Can View Thread Content. I have it so that users can post to the higher up sections and only be able to see their own threads. So Can View Thread Content is enabled however Can View Other's Thread Content is not.

Hmm, I'll need to find a way so that users can still post to the sections while still keeping the rest hidden from them.

If you know of a solution that'd be great if not I'll need to figure out something.

Thanks for your quick replies, much appreciated!

[webspider]

Originally Posted by DragonByte Tech

Turn on the "Disable Postbit Stats Collapse" setting in the vBulletin Options.
Fillip

I installed the mod the admincp cache setting in settings is blank.

[Gradonil_Ral]

Originally Posted by DragonByte Tech

Originally Posted by IGOTASTi

Where and how would this problem show up in what kind of search:

In vBulletin version 4.0.6 and above, Internet Brands changed the way
search results were being shown.
Hidden content may be exposed unless you perform this file edit.

Searches that display results as posts, as opposed to as threads.

This edit actually blocked all post previews for me (when I searched for posts). I could only see the thread titles and the "preview area" displayed -=Hidden Content=- message instead.
What's worse, when I turned the plugin off, all post searches resulted in: "500 Internal Server Error"...

When I removed these lines it all went back to normal. No hidden content is displayed (at least I couldn't find any - I tested it on a few accounts with different permissions and with two separate browsers).

I'm not sure when the original problem actually appeared (I don't remember ever having it), but the one that this "fix" causes is much worse, IMO.