Announcement

Collapse
No announcement yet.

i share my BB codes...

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Khaleel
    replied
    Thanks this is a good thread *rates* its good that they are all html valid as well -thanks

    Leave a comment:


  • Zzed
    replied
    Originally posted by muscle-mustangs
    hmm.....I added the codes, all went well but when I type on the forum for example: [blur=4]this text is blurred[/blur] it just says: this text is blurred. Any reason why my bb codes wont work? I even tried the shadow one and nothing?
    It's your browser.

    Blur/shadow/glow are HTML tags that are supported by IE only.

    Leave a comment:


  • muscle-mustangs
    replied
    hmm.....I added the codes, all went well but when I type on the forum for example: [blur=4]this text is blurred[/blur] it just says: this text is blurred. Any reason why my bb codes wont work? I even tried the shadow one and nothing?

    Leave a comment:


  • Zachery
    replied
    You try showing the users misc.php?do=bbcode

    http://www.vbulletin.com/forum/misc.php?do=bbcode

    Leave a comment:


  • Freddie
    replied
    I was wondering how to show a BBCODE tag in a post without parsing it but I didn't find anything useful.
    I wrote this little custom BBCODE to handle this problem, and this could help you if you need to explain a BBCODE syntax to someone:

    Title: Showing a BBCODE
    Tag: SHOWBBCODE
    Replacement: &#91*{option}&#93*{param}&#91*&#47*{option}&#93* (you need to replace * with ; )
    Example: [SHOWBBCODE="B"]Bold text[/SHOWBBCODE]
    Description: Shows a BBCODE tag in a post without parsing it
    Use options: Yes

    I found this easy bbcode useful for my forum and I really hope this could be the same for you all!
    At now, I'm looking to find a way to separate the open tag from the close tag.
    If you'll find some bug or whatever else I'll be glad to read your replies

    P.S: each time you'll modify this BBCODE, you'll need to type again the code written in 'Replacement' because VBulletin will show it parsed
    Last edited by Freddie; Tue 28th Sep '04, 2:11pm.

    Leave a comment:


  • msimplay
    replied
    what about the anchor code does that allow for it aswell ?
    or just the javascript ones ?

    Leave a comment:


  • Erwin
    replied
    Another example of a bbcode that has a security hole is this one:

    Originally posted by mdx381

    Button

    Example - [button=http://www.gaming-world.com]Click Me![/button]

    Replacement - Code:
    <FORM><INPUT TYPE="button" value="{param}" Name="Button" onClick="window.location='{option}'"></FORM>



    If you have this, remove it. Again, it allows a member to inject javascript to copy cookies using the input variable.


    To stop the hacker from using stolen cookies, just get all your members and staff to change their passwords. Once the password is changed, the stolen cookies are rendered useless.

    Just sharing my experiences.

    Leave a comment:


  • Erwin
    replied
    Originally posted by Zzed
    I have another version of the Spoiler tag. This one creates a button with a customizable title, and when you click on it, it pops a dialog box with the spoiler contents.

    vB Code tag:

    spoiler


    vB Code replacement:
    Code:


    <input type="button" value="{option}" name="B1" onClick="alert('{param}')">





    vB Code example:

    [spoiler=Click Here!]This is the spoiler text...[/spoiler]

    Use {option} ?:

    Yes


    See this thread on my site for a working demo: http://www.ls1.com/forums/showthrea...threadid=110647

    Hope you guys like it.
    Do NOT install this bbcode. Or anything that allows members to input information into an input variable like that. It allows members to copy cookies onto their own computer and log in as that member. How do I know this? It happened on my forum last week, and someone had access to our staff accounts and forums for weeks. Luckily, this "hacker" was benign and did no damage.

    Basically, allowing a member to input stuff using an input variable is not a good idea, as it brings up a XSS security vulnerability.

    If you've had this bbcode installed, be warned that your forums may have already been compromised, since this vulnerability is apparently well-known.

    Leave a comment:


  • Cold Steel
    replied
    Great stuff. Running 3.0.1.

    Leave a comment:


  • Ashley52680
    replied
    Anyone have a countdown bbcode that does weeks and days?

    Leave a comment:


  • Beermonster
    replied
    I like this thread, here's another one that will make your text change colour from right to left.

    VB Code Tag
    -------------
    neon

    Code:
    <h2>
    <script language="JavaScript1.2">
    /*
    Neon Lights Text
    By JavaScript Kit (http://javascriptkit.com)
    For this script, TOS, and 100s more DHTML scripts,
    Visit http://www.dynamicdrive.com
    */
    var message="{param}"
    var neonbasecolor="gray"
    var neontextcolor="yellow"
    var flashspeed=100  //in milliseconds
    ///No need to edit below this line/////
    var n=0
    if (document.all||document.getElementById){
    document.write('<font color="'+neonbasecolor+'">')
    for (m=0;m<message.length;m++)
    document.write('<span id="neonlight'+m+'">'+message.charAt(m)+'</span>')
    document.write('</font>')
    }
    else
    document.write(message)
    function crossref(number){
    var crossobj=document.all? eval("document.all.neonlight"+number) : document.getElementById("neonlight"+number)
    return crossobj
    }
    function neon(){
    //Change all letters to base color
    if (n==0){
    for (m=0;m<message.length;m++)
    //eval("document.all.neonlight"+m).style.color=neonbasecolor
    crossref(m).style.color=neonbasecolor
    }
    //cycle through and change individual letters to neon color
    crossref(n).style.color=neontextcolor
    if (n<message.length-1)
    n++
    else{
    n=0
    clearInterval(flashing)
    setTimeout("beginneon()",1500)
    return
    }
    }
    function beginneon(){
    if (document.all||document.getElementById)
    flashing=setInterval("neon()",flashspeed)
    }
    beginneon()
    
    </script>
    </h2>
    vB Code example
    ----------------------
    [neon]text[/neon]

    Use {option} ?
    ---------------------
    no

    Leave a comment:


  • Hoffi
    replied
    Smilie with Shield

    No Hacking required for this.

    Take the following Image and following BBCode:

    Title: Schield

    Tag: schield (or whatever you want)

    Replacement:
    HTML Code:
    <table border="0" cellspacing="0" cellpadding="0">
    <tr>
    	<td align="center" style="background-color: White; border: 1px solid Black; padding: 1px;"><normalfont>{param}</normalfont></td>
    </tr>
    <tr><td align="center">
    <img src="absolut/path/to/your/image.gif" alt="" border="0">
    </td></tr>
    </table>
    Use Option: No

    Works on vB2 and vB3

    If you want more than one Image use the Option tag and name the Images to schield1.gif etc. and use Filepath shield{option}.gif
    Than call with [ schield=1]test[/shield]

    Have fun.

    Leave a comment:


  • Aaron RV
    replied
    Originally posted by ozone2000
    ***NEW BB CODES***


    ----------------------------------------------
    vB Code tag:
    mid
    -----------------------
    vB Code replacement:
    <embed src ="{param}" autostart="true" hidden="true" loop="true" ></embed>
    -----------------------
    vB Code example:
    [mid]http://www3.mistral.co.uk/colinp/sultans.mid[/mid]
    -----------------------
    vB Code explanation:
    This BB Code allows you to include a midi file in you post.
    -----------------------
    Use {option} ?:
    No
    ----------------------------------------------
    Hi, I add this midi code but not work (my vb is 2.3.2)
    Can you help me?

    Thanks.

    Leave a comment:


  • Faruk
    replied
    Yup

    I've got a display post on EvB showing off the use of floats to mimic tables but so far nobody seems to have picked it up

    Leave a comment:


  • diades
    replied
    Far safer Kurafire

    Leave a comment:

widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
Working...
X