[safakuygur]

good thanks

[Terrona]

waiting update v 4.0.5

[WriteToEnlight]

Originally Posted by Terrona

waiting update v 4.0.5

Me too, or should I say soon 4.0.6

[BirdOPrey5]

Another vote for this being a serious security issue... I won't ever post in this thread again but I could not ignore this without warning people to seriously research the issue if they don't understand the risks in this. Limiting the use to trusted admins is an absolute minimum.

[firattetik]

thanks

[OldSchoolDSL]

Installed & working

4.1.1

[abumohamed]

It works on 4.1.3
THANKS

[syrus.xl]

Originally Posted by SEW810

yeah, specially if you execute it /open it manually.
NEVER a swf animation executed on a web page will interact with your hard disk files, Macromedia has implemented policies to avoid this kind of actions

Obviously, you are not a flash author or you would know that statement is completely incorrect. Flash SWF files on any webpage are executed automatically upon page load. Anyone that knows actionscript could easily upload and cause serious damage to any forum that has this modification enabled.

Interesting, it says something about interact with a program INSTALLED in your har disk, oh and dowload that file... oh yeah, I got it, "virus attack if I DOWNLOAD an swf file, save it on My Documents or something and then I open it" .... Jesus, what's that for??, did you forget that you were surffing the internet and visiting a forum? ¬¬ Don't do experiments if you don't know what you are doing.

Any forum carrying this sort of modification is leaving itself open to security issues. By the way, SWF files are cached directly to your system, so in affect they are downloaded. Here's just one example... Open up Flash, in the first frame add this code:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

This is AS3.0 code..

Now you have a redirect, if anyone hits the post containing the uploaded SWF file. Even more dangerous is if the code is far more malicious. The above code could easily redirect a person to another site containing a trojan which would infect their systems or even coded as a XSS exploit.

Totally inofesive that code, I repeat, is the same code used on http://www.msn.com/ at Advertisement, or at http://www.nfl.com/ or any site with flash animations.

These advertisements are added by web development teams and would under go strict QA before being allowed on a page. The only part that is safe about this code is the embed code, but even this breaks Strict xHTML W3C policies, check your coding regarding embedding flash correctly on a webpage and consider vB4 uses Strict xHTML, so by using this coding you are straight away breaking the Strict xHTML of vB4.

Please people, don't worry... be happy

If you don't want to take "the risk", please just don't install it.
Sharing this bb code wont help me to hack your site or get your bank account PIN or something.

Nobody would be happy with a hacked database, or a forum that is infecting peoples systems. Eventually, Google would place a 'Red' Alert page for malicious code if the problem was not dealt with. This is a very serious security hole to add to vBulletin and in my opinion like many others on here, should be removed for peoples safety, at least.

[thecore762]

This works perfectly with vB 4.1.11!

[yuchan]

works perfectly with Version 4.1.3 too

[thermax04]

using vb 4.1.11
did every thing as mentioned, all I get is white space!!

Originally Posted by thecore762

This works perfectly with vB 4.1.11!

Pls. advice

[fxdigi-cash]

worked perfect on vb4.2

Thanks a lot.

fxdigi-cash.com

[fxdigi-cash]

Originally Posted by thermax04

using vb 4.1.11
did every thing as mentioned, all I get is white space!!



Pls. advice

Hi there,

Make sure the example works fine first and then things will do the work.

Cheers

[thermax04]

Originally Posted by fxdigi-cash

Hi there,

Make sure the example works fine first and then things will do the work.

Cheers

How to Make sure the example works?
I used the one in your post:

[swf="height=100 width=400"]http://www.seusers.com/intro.swf[/swf]

Edit:
I found your example is not working, then I got another one and used it, and test it in Test your BB Code screen and it is working there, but when I used the same flash link in the example as test in the thread page, I get the same blank space, even when I modify the post I find the BB code disappears!!

Edit 2:
I found the problem
this is what I get: when i click the flash icon in thread or post to enter the swf link in the (Please enter the option for your [SWF] tag pop up screen:
[SWF=[swf="height=100 width=400"]http://www.mobileguide-mea.com/vb/images/ads/SIII.swf[/swf]][/SWF]

when I delete the things in red, it is working, so how to prevent these words in red to appear?


and sometimes it comes without the size option!! and it is not working till I write this part manually : [swf="height=100 width=400"

2 - the swf file appear smaller than original, how to make it appear with the original size?

3- how to prevent all users from using this bbcode (as I read for security reasons) and allow only the admin to use it?

[isynergymedia]

Life is easy with vb hacks