[stangger5]

Originally Posted by gsmlover4u

i installed 2.7.2+

http://www.vbulletin.org/forum/showt...01554&page=442

Originally Posted by gsmlover4u

there is nothing in arcade.php

Originally Posted by gsmlover4u

why you confused sir

You said,,,you installed 2.7.2+ and the code below isnt in the arcade.php file..

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Look on line 5575 in the arcade.php file..

[boggseric]

Originally Posted by VBDev

I have used stangger5 fix but was getting the reported issue with stristr on a customer forum.

I did the below edit, code will do the same and is simpler.

In arcade.php search for the ibp_cleansql function, search for

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Add below :

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Then search for :

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Comment it out :

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Add after :

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

That does the same but is fairly simpler...

Though I must admit that Mrz fixed the 2.7.1 security issue rather uglily...
That bit of code could remove actual correct content ...

I made these changes but now there error moved down one line.

Fatal error: Call to undefined function: str_ireplace() in /home/ls2com/public_html/forums/arcade.php on line 5601


2.7.2 does it now required PHP5?

my code in arcade.php

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

[hohleweg]

Hey

function ibp_cleansql($value)
{
if( get_magic_quotes_gpc() )
{
$value = stripslashes( $value );
}
//check if this function exists
if( function_exists( "mysql_real_escape_string" ) )
{
$value = mysql_real_escape_string( $value );
}
//for PHP version < 4.3.0 use addslashes
else
{
$value = addslashes( $value );
}

// remove any SQL-commands
$sqlcomm = array();
$sqlcomm[] = 'create';
$sqlcomm[] = 'database';
$sqlcomm[] = 'table';
$sqlcomm[] = 'insert';
$sqlcomm[] = 'update';
$sqlcomm[] = 'rename';
$sqlcomm[] = 'replace';
$sqlcomm[] = 'select';
$sqlcomm[] = 'handler';
$sqlcomm[] = 'delete';
$sqlcomm[] = 'truncate';
$sqlcomm[] = 'drop';
$sqlcomm[] = 'where';
$sqlcomm[] = 'or';
$sqlcomm[] = 'and';
$sqlcomm[] = 'values';
$sqlcomm[] = 'set';
$sqlcomm[] = 'password';
$sqlcomm[] = 'salt';
$sqlcomm[] = 'concat';
$sqlcomm[] = 'schema';
//$value = recursive_str_ireplace($sqlcomm, '', $value);
foreach ($sqlcomm AS $key => $needle)
{
$value = str_ireplace($needle, '', $value);
}
return $value;
}

with this code it work fine!
Greetings Jo

[silpher]

Originally Posted by VBDev

I have used stangger5 fix but was getting the reported issue with stristr on a customer forum.

I did the below edit, code will do the same and is simpler.

In arcade.php search for the ibp_cleansql function, search for

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Add below :

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Then search for :

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Comment it out :

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Add after :

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

That does the same but is fairly simpler...

Though I must admit that Mrz fixed the 2.7.1 security issue rather uglily...
That bit of code could remove actual correct content ...

Thanks, that worked for me

[CristianoDiaz]

Originally Posted by VBDev

I have used stangger5 fix but was getting the reported issue with stristr on a customer forum.

I did the below edit, code will do the same and is simpler.

In arcade.php search for the ibp_cleansql function, search for

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Add below :

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Then search for :

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Comment it out :

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Add after :

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

That does the same but is fairly simpler...

Though I must admit that Mrz fixed the 2.7.1 security issue rather uglily...
That bit of code could remove actual correct content ...

Thank you! This fixed the problem for me, it's been driving me nuts.

[doubleclick]

Hey guys -

Is it possible for stangger5 and Hippy to get "joint custody" of this script since Mr Z is too busy? Having to sift through multiple threads with lengthy discussions about which code to use, what edits are best and why 2.7.1 is the version to use and not 2.72 (???!!!???) gets pretty confusing for us non-coders.

For a long time now, this script is has been officially dormant with new versions few and far between, while fixes (or not) abound in the forums. I understand the original author has expanded his family and his outside comimtments, and I'm not trying to criticize him in the least. Without him, this wouldn't be here in the first place.

That said, stangger5 and Hippy have been doing most of the heaving lifting on this script for some time now, and it seems it would be to everyone's benefit to give them equal access to the official releases along with Mr. Z to make this an equal partnership. The code could get back on track to be the awesome script it could be, instead of limping along and propped up with forum post file edits. They both have demonstrated a commitment to the script, and on their own sites have expanded its capabilities. Let's give 'em a chance to take this script to new heights instead of limiting their talents to covering it with bandaids.

Do I hear an "amen?"

[Hippy]

in my sig youll find a link to the post I made with everything youll needl I did the reading and sifting for you all..

If anyone stangger5 is the man..
when it come to this arcade..
but i will be here helping all the same to keep this arcade alive

[dlewisr]

Originally Posted by Hippy

so it should like this ?

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

I been using stangger5's edit and works on every update I did..
I am just wondering at this moment.. thanks

This worked for me. Cheers for that Hippy

[boggseric]

Originally Posted by boggseric

I made these changes but now there error moved down one line.

Fatal error: Call to undefined function: str_ireplace() in /home/ls2com/public_html/forums/arcade.php on line 5601


2.7.2 does it now required PHP5?

my code in arcade.php

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

In case anyone cares, the new version of Arcade DOES require PHP5, str_ireplace is not available in PHP4.

[Hippy]

Originally Posted by boggseric

In case anyone cares, the new version of Arcade DOES require PHP5, str_ireplace is not available in PHP4.

try this ... relace your root arcade file with this one

http://www.vbulletin.org/forum/attac...6&d=1335142146

[Raptor]

Originally Posted by Hippy

try this ... relace your root arcade file with this one

http://www.vbulletin.org/forum/attac...6&d=1335142146

here is where the confusion creeps in again

do we all use the arcade.php you linked to here or do we do the edits that the rest of the thread talks about as the 2 are completely different

[Hippy]

I did the eidtes in the attached file to make it easy for everyone