Several ckeditor problems

[rJmJr69]

Disableing smilies had this effect on my forum.
imagine turning off smilies causes issues?

[Lynne]

I don't even know what most of that stuff is for - why did you add it in the first place? I supposed I would try commenting out a group at a time and seeing if I could figure it out that way. I did notice something regarding javascript, so maybe try that one also. Perhaps figure out if you really even need all of that stuff.

[notfrostyjosh]

Okay, I verified that it is indeed the .htaccess file causing the problems. I copy/pasted it in this post: https://www.vbulletin.com/forum/show...=1#post2177555 Is it possible to quickly check it over and see what would be causing the issues?

[Lynne]

Would something in my .htaccess file be preventing something from working properly?

Remove the file temporarily and see if it works now.

[worried]

Have you filled out a trouble ticket? I would be freaking out about now.

[notfrostyjosh]

No, that's not it.

[benative]

Upgrading your browser can help you resolve those problems. Also, tell your visitor's to upgrade their browsers.

[notfrostyjosh]

Would something in my .htaccess file be preventing something from working properly?

## RewriteEngine enabled

RewriteEngine On



# If the request contains /proc/self/environ

RewriteCond %{QUERY_STRING} proc\/self\/environ [OR]

# Legacy configuration variable injection

RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]

# Block out any script trying to base64_decode stuff to send via URL

RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [OR]

# Block out any script that includes a <script> tag in URL

RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]

# Block out any script trying to set a PHP GLOBALS variable via URL

RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]

# Block out any script trying to modify a _REQUEST variable via URL

RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})

# Instead of using 403, we'd better use 404 (Not Found) to confuse hackers

RewriteRule ^(.*)$ index.php [R=404,L]



## File injection protection

RewriteCond %{REQUEST_METHOD} GET

RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]\=http:\/\/(.*)

RewriteRule ^(.*)$ - [R=404,L]





## SQLi first line of defense

## May cause problems on legitimate requests

RewriteCond %{QUERY_STRING} concat.*\( [NC,OR]

RewriteCond %{QUERY_STRING} union.*select.*\( [NC,OR]

RewriteCond %{QUERY_STRING} union.*all.*select.* [NC]

RewriteRule ^(.*)$ - [R=404,L]





## Common hacking tools and bandwidth hoggers block



# The following rules are for common hacking tools:

SetEnvIf user-agent "Indy Library" stayout=1

SetEnvIf user-agent "libwww-perl" stayout=1

SetEnvIf user-agent "Wget" stayout=1

# The following rules are for bandwidth-hogging download tools

SetEnvIf user-agent "Download Demon" stayout=1

SetEnvIf user-agent "GetRight" stayout=1

SetEnvIf user-agent "GetWeb!" stayout=1

SetEnvIf user-agent "Go!Zilla" stayout=1

SetEnvIf user-agent "Go-Ahead-Got-It" stayout=1

SetEnvIf user-agent "GrabNet" stayout=1

SetEnvIf user-agent "TurnitinBot" stayout=1

# This line denies access to all of the above tools

deny from env=stayout





### Add handlers - Breaks themes

#AddHandler php-cgi .php .inc

#AddType 'text/html; charset=UTF-8' .html

#AddType text/plain .ini .sh .bsh .bash .awk .nawk .gawk .csh .var .c .in .h .asc .md5 .sha .sha1

#RewriteCond %{REQUEST_FILENAME} !-f # Existing File

#RewriteCond %{REQUEST_FILENAME} !-d # Existing Directory

#RewriteRule . /index.php [L]



## Denies any direct request for files in wp-content ending in .php with a 403 Forbidden (may break plugins/themes)

RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /wp-content/.*$ [NC]

RewriteCond %{REQUEST_FILENAME} !^.+flexible-upload-wp25js.php$

RewriteCond %{REQUEST_FILENAME} ^.+\.(php|html|htm|txt)$

RewriteRule .* - [F,NS,L]



## Denies any direct request for files wp-includes ending in .php with a 403 Forbidden

RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /wp-includes/.*$ [NC]

RewriteCond %{THE_REQUEST} !^[A-Z]{3,9}\ /wp-includes/js/.+/.+\ HTTP/ [NC]

RewriteCond %{REQUEST_FILENAME} ^.+\.php$

RewriteRule .* - [F,NS,L]



## Blocks some common exploits with a 403 Forbidden

RewriteCond %{REQUEST_URI} !^/(wp-login.php|wp-admin/|wp-content/plugins/|wp-includes/).* [NC]

RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ ///.*\ HTTP/ [NC,OR]

RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /.*\?\=?(http|ftp|ssl|https):/.*\ HTTP/ [NC,OR]

RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /.*\?\?.*\ HTTP/ [NC,OR]

RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /.*\.(asp|ini|dll).*\ HTTP/ [NC,OR]

RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /.*\.(htpasswd|htaccess|aahtpasswd).*\ HTTP/ [NC]

RewriteRule .* - [F,NS,L]



## Denies any POST attempt made to a non-existing wp-comments-post.php

RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /.*/wp-comments-post\.php.*\ HTTP/ [NC]

RewriteRule .* - [F,NS,L]



## Denies any request for a URL containg characters other than "a-zA-Z0-9.+/-?=&"

#RewriteCond %{REQUEST_URI} !^/(wp-login.php|wp-admin/|wp-content/plugins/|wp-includes/).* [NC]

#RewriteCond %{THE_REQUEST} !^[A-Z]{3,9}\ [a-zA-Z0-9\.\+_/\-\?\=\&]+\ HTTP/ [NC]

#RewriteRule .* - [F,NS,L]



## Denies any POST request with a content type other than application/x-www-form-urlencoded|multipart/form-data

RewriteCond %{REQUEST_METHOD} =POST

RewriteCond %{HTTP:Content-Type} !^(application/x-www-form-urlencoded|multipart/form-data.*(boundary.*)?)$ [NC]

RewriteCond %{REQUEST_URI} !^/(wp-login.php|wp-admin/|wp-content/plugins/|wp-includes/).* [NC]

RewriteRule .* - [F,NS,L]



## Denies exploit using bogus graphics (.jpg that's really .php code)

RewriteCond %{HTTP:Content-Disposition} \.php [NC]

RewriteCond %{HTTP:Content-Type} image/.+ [NC]

RewriteRule .* - [F,NS,L]



# Use PHP5 as default

AddHandler application/x-httpd-php5 .php

AddHandler fcgid-script php cgi fcgi



# BEGIN WordPress

<IfModule mod_rewrite.c>

RewriteEngine On

RewriteBase /

RewriteRule ^index\.php$ - [L]

RewriteCond %{REQUEST_FILENAME} !-f

RewriteCond %{REQUEST_FILENAME} !-d

RewriteRule . /index.php [L]

</IfModule>



# END WordPress



RewriteCond %{HTTP_HOST} ^easywdw\.com$ [NC]

RewriteRule ^(.*)$ http://www.easywdw.com/$1 [R=301,L]

[notfrostyjosh]

Yes, I manually unchecked everything and reuploaded the original vbulletin_textedit.js and it's doing the same leave page/stay on page every time someone clicks the post quick reply button along with all of the same problems as before.

[Steve Machol]

Also please upload the original vbulletin_textedit.js file.

[Steve Machol]

Did you manually uncheck each plugin for that add-ons?

[notfrostyjosh]

I originally overwrote the vBulletin files this morning and ended up deleting them all and then reuploading them from a fresh download. For Suspect File Versions the errors I get are:

vbulletin_textedit.js File does not contain expected contents
blank.html File does not contain expected contents

The reason for the first file is that I edited it as noted here: http://tracker.vbulletin.com/browse/VBIV-12548

For Plugins I have

Acronym Mod for vB 3.5	0.1	Modified by ibeji 18-08-2007 09:49
DragonByte Tech: Advanced Post Thanks / Like (Lite	1.1.4	Advanced Post Thanks / Like lets members quickly voice their opinion on a post.
Footer Link	1	It will a custom link in the footer
GlowHost - Spam-O-Matic	2.0.2	Ultimate solution to defend against SPAM: Check new registrations from StopForumSpam database, auto moderate posts against custom word-list and Akismet service.
PHPKD - Advanced Quick Reply 'Ultimate'	4.0.110	This product extends 'Quick Reply' functionality to allow all "Advanced Editor" options [ All Built-In BBCodes / Attachments / Smilies / Management ], (threads, blogs, social groups, albums, visitor messages, private messages) [customizable].
Skimlinks Plugin	2.0.7	Official Skimlinks plugin for vBulletin
Tabs en vBulletin 4.x	2.0.3	Sistema que permite poner Tabs en el menú de vBulletin

They are all disabled and crossed out. I also added that line of code in config.php to disable hooks as directed in the link in my original post that tried to fix the "reply with quote" hang.

Everything is unchecked in the plugin manager and I "saved active status" again.

I created "Newest Style" with no parent style and the problems are the same.

[Steve Machol]

Honestly I don't see how you can have those problem with the default vB. Let's start at the beginning.

To troubleshoot this, first reupload all the original vB non-image files (except install.php). Make sure you upload these in ASCII format and overwrite the ones on the server. Also be sure to upload the admincp files to whichever directory you have set in your config.php file. Then run 'Suspect File Versions' in Diagnostics to make sure you have all the original files for your version and that none show 'File does not contain expected contents':

Admin CP -> Maintenance -> Diagnostics -> Suspect File Versions

[Note: In some cases you may also need to remove any of the listed .xml files in the includes/xml directory.]

Next, disable all products (except vB Blog, vB CMS and Skimlinks if you have them.)

Admin CP -> Plugins & Products -> Manage Products -> Disable

Then manually uncheck all plugins that are not for 'vBulletin Blog' and vBulletin CMS' here:

Admin CP -> Plugins & Products -> Plugin Manager

You must do BOTH of those steps in order to disable all non vBulletin Modifications.

Then if you still have this problem, create a new style and choose no parent style. This will force it to use the default templates. Finally empty your browser cache, close all browser windows then try again. Make sure you change to the new style and view your forums with it.

Do you have the same problem?

[notfrostyjosh]

Under Enable Clickable Message Formatting Controls I have "Enable Standard and WYSIWYG Controls" for all three options.

For Settings -> Edit Options -> Message Editor Interface -> Enhanced Interface do you mean "General Settings" rather than "edit options?" Either way, I have "Enhanced Interface - Full WYSIWYG Editing" selected.

For Allow users to include BB code in non-forum-specific areas? (Such as [b], [i] etc.) I have it selected as "Yes."

And I'm still having the same problems.

[Steve Machol]

First, make sure you have the WYSIWYG Editor enabled here:

Admin CP -> Settings -> Options -> Message Posting Interface Options -> Enable Clickable Message Formatting Controls

Then make sure you have selected the Enhanced editor in your user Settings:

Settings -> Edit Options -> Message Editor Interface -> Enhanced Interface

If you see the editor without the images, then this means you have not uploaded the 4.1.4 'images/editor/sprite.png' file. You need to do that.

Then make sure you have all BB Code options enabled here:

Admin CP -> Settings -> Options -> BB Code Settings -> Enabled Built-in BB Codes

And have set this:

Admin CP -> Settings -> Options -> BB Code Settings -> Allow BB Code in Non Forum Specific Areas -> Yes