for punbb 1.2.20]]> for punbb 1.2.20]]>Fantasma: Sorry i took so long to repply, i forgot about this thread.
I would do this some other time, but at this time i cant afford to put time on small code project. I would do it for a some money, but to be honest i feel kind of heavy conscience charging for a plugin to something that is kindly available for free.
But, more important than that there is another problem.
This module would require code hacking and database hacking, which basically means that you would have to manually make all the painfull changes when you update your forum. And it would all probably be useless when punbb 1.3 comes.
version 1.3 will have hooks and the plugins will be stored in the database. That will be the perfect conditions for the development of a mod like this.
If you can wait until 1.3 I think this mod should not take so long to pop up. Probably coded by me... i dunno.
]]>* Moved template tag replacement of pun_include to the top of all replacements to prevent exploitation via XSS vulnerabilities. On top of this, all included files must have one of the file extensions .php, .php4, .php5, .inc, .html, .htm or .txt.
So, if you want to use this mod you could undo this change by cutting the following code
// START SUBST - <pun_include "*">
while (preg_match('#<pun_include "([^/\\\\]*?)\.(php[45]?|inc|html?|txt)">#', $tpl_main, $cur_include))
{
if (!file_exists(PUN_ROOT.'include/user/'.$cur_include[1].'.'.$cur_include[2]))
error('Unable to process user include '.htmlspecialchars($cur_include[0]).' from template main.tpl. There is no such file in folder /include/user/');
ob_start();
include PUN_ROOT.'include/user/'.$cur_include[1].'.'.$cur_include[2];
$tpl_temp = ob_get_contents();
$tpl_main = str_replace($cur_include[0], $tpl_temp, $tpl_main);
ob_end_clean();
}
// END SUBST - <pun_include "*">from header.php
and pasting it into footer.php before
// Close the db connection (and free up any result data)
$db->close();But since this may cause a security issue I would appreciate advice on how to insert
if($post_count == 1) $description = $cur_post['message'];in viewtopic.php so that $description is available when template tag replacement of pun_include is made.
Any ideas?
]]>bumb this discussion!!!!
]]>yes yemgi i done the modifications in viewtopic.php
but i think may be there is Conflict with another mods
]]>