[sross]

Ah, i forgot about that. All good now, thanks!

[Webrunner]

Post that are put into the moderation queue are shown, even though they haven't been approved yet. Is there something that i can do to prevent that?

[sinucello]

Hi,
great mod. Could this cover social groups, too?
all the best,
Sacha

[tsptom]

This looks like a great mod. Kind of makes the activity stream look like a toy.

I'll give it a try.

Thanks!

[tsptom]

Very cool! It even filters out the private forums by permission.

If I had one suggestion it would be to call it something other than "spy". Sounds devious like we're spying on members. Maybe something friendlier like 'activity stream', but of course that was taken.

How about 'Forum Monitor" or "Live Action?" Just say'in.

Great mod! Thanks again.

[tsptom]

Would it be possible to ignore the Edit Post rows?

What would need changed? Both the xml and the php files, or would just commenting out this line in the php do it?

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Update: Nevermind. Changed the SELECT in spy.php adding:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

... to the where clause.

[datoneer]

vb 4.2.0 spy gone from community tab

[digitalpoint]

Originally Posted by datoneer

vb 4.2.0 spy gone from community tab

Yep, they changed how tabs work in vB 4.2.0. From what I hear, they have an interface to create your own tabs fairly simply, but I haven't looked at it myself since I don't have access to a 4.2.0 installation yet.

[datoneer]

Yes i found it much better and easier now

[xyd]

To be honest, I'm disappointed I have to post this here.

This mod is still vulnerable to allowing a user to pass non-sanitized HTML to the spy window.

I approached the author around 6-8 months ago and informed him of this, however it is clear that he did nothing about it - didn't fix it, didn't inform users that they were using vulnerable software. While I understand it is hard to admit that you made a mistake when coding, it is even more of a mistake to allow people to run software on their site which is vulnerable to XSS. Cross site scripting ruins companies and ruins lives.





For those of you who want to fix this yourselves, simply edit spy.php and find the following line:

$xml->add_tag('preview', $event['preview']);

...and change it to:

$xml->add_tag('preview', strip_tags($event['preview']));

Do the right thing and fix your software before someone gets hit.

[digitalpoint]

Oh yeah... forgot I fixed that on my site years ago and never got around to uploading the new version here. Should be uploaded now.

[xyd]

Good stuff, thank you.

[Wseries]

Is there a way to increase the preview displayed for posts when looking at the spy.php page?

[blackberry]

Originally Posted by dutchbb

Ok I understand.

Edit: found old backup of it and attached it for anyone interested. If you don't want them uploaded please contact so I can remove them.

its not working

[DefiantComplex]

Great mod, in fact this is way better then the default activity manager in vb4.2 lol.

Thanks for the share