Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
Custom User Pages - Users make pages using html/bbcode on any template safely Details »»
Custom User Pages - Users make pages using html/bbcode on any template safely
Mod Version: 1.00, by carcomp (Contributor) carcomp is offline
Developer Last Online: Jun 2012 I like it Show Printable Version Email this Page

vB Version: 3.8.2 Rating: (0 vote - 0 average) Installs: 9
Released: 06 Apr 2009 Last Update: Never Downloads: 2
Not Supported Uses Plugins Template Edits  

Ok this is just something i've been slapping together the past few days, using code from here, google, and whatnot. I didn't write 99% of it, but I thought up the idea!

Ok heres the deal. You want your users to be able to customize a page such as MEMBERINFO. Problem is, really customizations all look EXACTLY the same. So I thought, why not let the users just program their own html css stuff like on myspace, as well as allow bbcode. If it messes up their memberinfo page, so what. Its their own fault and they should fix it. (My members are really a close knit family of computer / car people so I think they can handle this). I trust most of them, but since this mod only allows what you specify, you can't add things like <SCRIPT> tags or php code etc.

The following code works in conjunction with a custom template and an eval'd variable.

To get this to work, you first have to create a new custom profile field. I don't know what the number of this field will be, so you'll have to figure that one out yourself. You should probably specify a multi line field with a lot of space. Once you create the profile field, enter the number in the code below.

Next, you need to create a new template. Call it user_custompage. In this template, put one line...

$mypage


Then, create a plugin and link it to global_start

in the plugin, put the following code...


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

See there where it says 'field65'? Thats where you put your profile field number.

Now all that you have to do is put $mypage in whatever template you want your user's custom profile field html to show.

This is possibly the most unsafe hack ever for your website, but it demonstrates a really cool principal that by specifying which tags a user can use, they can make a website. And yes, if they mess up the code, everyone will see your website all broken.

This is my first whack at posting something i've hacked together, so please bear with me

Here is a link to see it in action. All the stuff you see between the "MOD STARTS HERE" and "MOD STOPS HERE" is a profile field.

http://www.quad4forums.com/test/member.php?u=3472

Here is the code i've entered in the profile field. I spent about 30 seconds on it, so its not a definitive example of whats possible, but it gets the idea across. I've also added the script tag so you can view my page's source and notice its not there.

(I have to use strikeout so vbulletin.org doesn't parse the bbcode)

MOD STARTS HERE
<B><TABLE style="width: 100%; padding: 0px; border: 1px; border: 1px solid #789DB3; background-image: url(http://www.travelblog.org/Wallpaper/pix/waterfall_desktop_background-1600x1200.jpg)"><TD>
<p align="center">
[b]Here is my test page[/b]
[img]http://mediaengine.org/mitcht/gallery/albums/misc/My_Car_010.sized.jpg[/img]
</p>
<TR></TR> </TD></B></table>
<DIV>
<SCRIPT>
<?

MOD ENDS HERE

BTW. This is my test forum, so its not going to be doing much!

Download Now

Only licensed members can download files, Click Here for more information.

Screenshots

Click image for larger version

Name:	justademo.jpg
Views:	937
Size:	37.2 KB
ID:	97354

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Comments
  #2  
Old 06 Apr 2009, 21:52
dxflw dxflw is offline
 
Join Date: May 2008
hmm any screen shots?
Reply With Quote
  #3  
Old 06 Apr 2009, 21:58
carcomp carcomp is offline
 
Join Date: Feb 2008
Go to that link I just linked you to. A screenshot would be kinda pointless because WHATEVER you write in html, becomes the page. Its so customizable its almost ridiculous. It pretty much exactly duplicated the myspace css thing.
Reply With Quote
  #4  
Old 07 Apr 2009, 09:27
Jasem's Avatar
Jasem Jasem is offline
 
Join Date: Feb 2006
Location: www.menokia.com
thank you!
__________________
games
Forum Nokia
Reply With Quote
  #5  
Old 07 Apr 2009, 11:27
ahmed-samara's Avatar
ahmed-samara ahmed-samara is offline
 
Join Date: Dec 2004
Real name: Ahmed Mohamed
it's open way to hacker my website by bbcode $ Html that is not secur
__________________
Please don't PM me , Send request or enquiry to the Forum

support vBulletin Arabic, vBulletin Manual , vBulletin API
Reply With Quote
  #6  
Old 07 Apr 2009, 14:20
gwerzal's Avatar
gwerzal gwerzal is offline
 
Join Date: Oct 2007
Will take a look at this

Thanks
Reply With Quote
  #7  
Old 07 Apr 2009, 14:25
Sweeks's Avatar
Sweeks Sweeks is offline
 
Join Date: Jul 2008
I would like to see this integrated with the current user customisation options. Allowing HTML and CSS within that would be awesome.
________
Vaporizer Vulcano

Last edited by Sweeks : 06 Apr 2011 at 12:54.
Reply With Quote
  #8  
Old 08 Apr 2009, 01:24
EagleNick's Avatar
EagleNick EagleNick is offline
 
Join Date: Dec 2007
Real name: Nick
I don't understand why you striked out the text. Why don't you just use the [noparse] bbcode if you don't want certain code parsed?
__________________
Regards,
Nick

Reply With Quote
  #9  
Old 08 Apr 2009, 15:49
carcomp carcomp is offline
 
Join Date: Feb 2008
Ok didn't even see that! Also, it *shouldn't* allow hacking because you specify the tags you want. So only allow <B> tag and thats the ONLY html tag that works. Allow the <DIV> tag and that opens up "myspace style" website design. I'm really suprised that hasn't been done before.


FACEPALM!
Reply With Quote
  #10  
Old 22 May 2009, 23:19
monkeyboy1916's Avatar
monkeyboy1916 monkeyboy1916 is offline
 
Join Date: Nov 2006
I'm looking for something a bit similar.. but I can make this work for what I need, just having a slight problem..

When I view other profiles, it shows my info where theirs should be (from the newly created field), any idea on a fix?
Reply With Quote
  #11  
Old 23 May 2009, 00:11
TheLastSuperman's Avatar
TheLastSuperman TheLastSuperman is offline
 
Join Date: Sep 2008
Real name: Michael Miller Jr
Originally Posted by carcomp View Post
Ok didn't even see that! Also, it *shouldn't* allow hacking because you specify the tags you want. So only allow <B> tag and thats the ONLY html tag that works. Allow the <DIV> tag and that opens up "myspace style" website design. I'm really suprised that hasn't been done before.


FACEPALM!
Aye! That's no face palm lol, that's when Data says something over the top OR Ryker just came back from Diana's office w/ a smile on his face

Can you clean up your mod post when you see this, it shows the incomplete code and where the hello did that "<?" come from

<b><table style="width: 100%; padding: 0px; border: 1px; border: 1px solid #789DB3; background-image: url(http://www.travelblog.org/Wallpaper/pix/waterfall_desktop_background-1600x1200.jpg)"><td ><p align="center"><b>Here is my test page</b><br>


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

And more details for the "members"

Originally Posted by monkeyboy1916 View Post
I'm looking for something a bit similar.. but I can make this work for what I need, just having a slight problem..

When I view other profiles, it shows my info where theirs should be (from the newly created field), any idea on a fix?
Newly created field pulls the info from your profile when YOU view, you need to code this differently to show who's info it is in the page, this can be done via postbit templates.
__________________
Anti-Spam Methods and Resources
InnovationByInstinct.com - Custom vBulletin Modifications, Styles, and Services.
Skype: innovationbyinstinct

Search - Use the search feature to find similar issues/answers.
Information - Include screenshots, copy/pasted error codes, url etc.
Fixed - Please return to your thread/post and let us know how it was fixed!
Thanks - For participating! Click the "Like" on a post if someone helped you!
Reply With Quote
  #12  
Old 28 Jun 2009, 00:40
kalisekj kalisekj is offline
 
Join Date: Dec 2006
This is just what I was looking for , allowing me to create custom user profile fields that allow the users to install widgets on their profiles.

"Newly created field pulls the info from your profile when YOU view, you need to code this differently to show who's info it is in the page, this can be done via postbit templates."

Please tell me exactly what needs to be done so when a person goes to anothers profile they see that persons info/widget?
Reply With Quote
  #13  
Old 28 Jun 2009, 16:00
kalisekj kalisekj is offline
 
Join Date: Dec 2006
Please can someone elaborate how how to make this show that specific users custom field and not my custom field on their profile pages? This is a GREAT Hack! I will definitely nominate this for mod of the month if I can just have this small problem resolved. This allows me to let the users customize their Profile pages with their own widgets, just like all the major social sites out there like Myspace, Hi5, Tagged, Facebook and many others. Awesome Idea!
Reply With Quote
  #14  
Old 28 Jun 2009, 16:23
kalisekj kalisekj is offline
 
Join Date: Dec 2006
Wink

Originally Posted by ahmed-samara View Post
it's open way to hacker my website by bbcode $ Html that is not secure
Html Is already allowed in many areas of VB, If you back up your site nightly you should not worry as much.
Truly folks, people hacking your site via html or BB Code is very unlikely to happen, most of our sites are not worth their time and trouble. You can specify exactly which codes you will allow. I see most of the social sites out there enabling widgets and html on their servers and user pages IE: MySpace, Facebook, Hi5, Tagged just to name a few and funny thing is they are not going down because of some hacker.
Reply With Quote
  #15  
Old 28 Jun 2009, 16:28
deadlySniper deadlySniper is offline
 
Join Date: Dec 2008
Location: New York
Real name: Ryan Carr
Nice, thanks.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
Forum Jump


New To Site? Need Help?

All times are GMT. The time now is 08:49.

Layout Options | Width: Wide Color: