Vulners
Lucene search
MyBB User Social Networks Plugin 1.2 - Stored XSS Vulnerability
# Exploit Title: User Social Networks MyBB Plugin 1.2 - Cross Site Scripting
# Google Dork: N/A
# Date: 05.09.2014
# Exploit Author: Fikri Fadzil - [email protected]
# Vendor Homepage - N/A
# Software Link: http://mods.mybb.com/view/user-social-networks
# Version: 1.2
# Tested on: PHP
Description:
This plugin allows you to add social networks, or related, in user
profiles. The information will be shown in a user profile and visible for
anyone who view the profile.
Proof of Concept
1. Login into your account.
2. Go to "Edit Profile" page at "/usercp.php?action=profile"
3. Update your Social Network ID with
"><script>alert(document.cookie)</script><"
4. The result can be seen in multiple places, including your profile page.
* The script will be executed whenever anyone view your profile.
** The result can also be seen in threads you involve IF the administrator
configure this plugin to allow user's social sites information to be
published in every post.
Solution:
Replace the content of "inc/plugins/usersocial.php" with this fix:
<?php
/**
*
* Fixed by Fikri Fadzil - [email protected]
* - As I couldn't contact the developer, this is the patch for time being.
*
* User Social 1.1
*
* Copyright 2014 CrazyCat
*
* This program is free software: you can redistribute it
* and/or modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation, either version 3
* of the License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
* See the GNU General Public License for more details.
*
*You should have received a copy of the GNU General Public License
* along with this program.
*If not, see <http://www.gnu.org/licenses/>.
**/
/**
* Short changelog
*
* 1.2 : corrected usercp and member profil queries
*
* 1.1 : corrected package (pictures missing, language variables)
* Upgrade: unactivate the plugin, upload the new version and re-activate
*
* 1.0 : Initial release
**/
if(!defined('IN_MYBB'))
{
die('This file cannot be accessed directly.');
}
function usersocial_info()
{
return array(
'name' => "User social fields",
'description' => "Display more user social ids",
'website' => 'http://www.g33k-zone.org/',
'author' => 'CrazyCat',
'authorsite' => 'http://www.g33k-zone.org/',
'version' => '1.2',
'compatibility' => '16*',
'guid' => 'da8691c12e504d9bba121d7b073bd3ed'
);
}
if(defined('IN_ADMINCP'))
{
$plugins->add_hook('admin_user_menu', 'usersocial_menu');
$plugins->add_hook('admin_user_action_handler', 'usersocial_action_handler');
$plugins->add_hook('admin_load', 'usersocial_admin_load');
$plugins->add_hook('admin_user_permissions', 'usersocial_admin_permissions');
}
else
{
$plugins->add_hook('postbit_prev', 'usersocial_postbit');
$plugins->add_hook('postbit_pm', 'usersocial_postbit');
$plugins->add_hook('postbit', 'usersocial_postbit');
$plugins->add_hook('postbit_announcement', 'usersocial_postbit');
$plugins->add_hook('member_profile_end', 'usersocial_profile');
$plugins->add_hook('usercp_profile_start', 'usersocial_usercp');
$plugins->add_hook('datahandler_user_update', 'usersocial_update_user');
}
function usersocial_menu(&$sub_menu)
{
global $lang;
$lang->load('usersocial');
$sub_menu[] = array('id' => 'usersocial', 'title' => $lang->usersocial, 'link' => 'index.php?module=user-usersocial');
}
function usersocial_install()
{
global $db;
if (usersocial_is_installed()) {
usersocial_uninstall();
}
$collation = $db->build_create_table_collation();
if(!$db->table_exists('social_network'))
{
$db->write_query("CREATE TABLE IF NOT EXISTS ".TABLE_PREFIX."social_network (
`snid` int(11) NOT NULL AUTO_INCREMENT,
`sn_name` varchar(50) NOT NULL,
`sn_label` varchar(255) NOT NULL,
`sn_active` int(1) NOT NULL DEFAULT '1',
`sn_profil` int(1) NOT NULL DEFAULT '1',
`sn_postbit` int(1) NOT NULL DEFAULT '0',
`sn_link` varchar(250) NOT NULL,
`sn_image` varchar(50) NOT NULL,
`sn_order` int(5) NOT NULL,
PRIMARY KEY (`snid`)
) ENGINE=MyISAM{$collation};"
);
}
$db->insert_query('social_network',
array(
'sn_name' => 'Facebook',
'sn_label' => 'Insert your Facebook username',
'sn_link' => 'http://www.facebook.com/#username#',
'sn_image' => 'facebook.png',
'sn_order' => 1
)
);
$db->insert_query('social_network',
array(
'sn_name' => 'Twitter',
'sn_label' => 'Insert your Twitter username',
'sn_link' => 'http://www.twitter.com/#username#',
'sn_image' => 'twitter.png',
'sn_order' => 2
)
);
$db->insert_query('social_network',
array(
'sn_name' => 'Pinterest',
'sn_label' => 'Insert your Pinterest username',
'sn_link' => 'http://www.pinterest.com/#username#/',
'sn_image' => 'pinterest.png',
'sn_order' => 3
)
);
if(!$db->table_exists('social_user_network'))
{
$db->write_query("CREATE TABLE IF NOT EXISTS ".TABLE_PREFIX."social_user_network (
`snid` int(11) NOT NULL,
`uid` int(11) NOT NULL,
`sn_value` varchar(255) NOT NULL,
`sn_private` int(1) NOT NULL DEFAULT '0',
UNIQUE KEY `snid` (`snid`,`uid`)
) ENGINE=MyISAM{$collation};"
);
}
}
function usersocial_is_installed()
{
global $db;
if( $db->table_exists('social_network') && $db->table_exists('social_user_network')) {
return true;
}
return false;
}
function usersocial_uninstall()
{
global $db;
if($db->table_exists('social_network'))
{
$db->drop_table('social_network');
}
if($db->table_exists('social_user_network'))
{
$db->drop_table('social_user_network');
}
}
function usersocial_activate()
{
global $db, $mybb;
$db->insert_query('templates',
array(
'title' => 'usersocial_postbit',
'template' => $db->escape_string('<a href="{$network[\'sn_link\']}" title="{$network[\'sn_name\']}"><img src="{$network[\'sn_image\']}" /></a>'),
'version' => intval(1614),
'dateline' => TIME_NOW,
'sid' => -1
)
);
$db->insert_query('templates',
array(
'title' => 'usersocial_member_profile_row',
'template' => $db->escape_string('<tr>
<td class="trow{$network[\'even\']}"><strong>{$network[\'sn_name\']}</strong></td>
<td class="trow{$network[\'even\']}">{$network[\'ulink\']}</td>
</tr>'),
'version' => intval(1614),
'dateline' => TIME_NOW,
'sid' => -1
)
);
$db->insert_query('templates',
array(
'title' => 'usersocial_usercp_row',
'template' => $db->escape_string('<tr>
<td><span class="smalltext">{$network[\'sn_name\']}</span></td>
<td><input type="text" class="textbox" size="25" name="sn[{$network[\'snid\']}]" value="{$network[\'sn_value\']}" /></td>
<td><input type="checkbox" name="snp[{$network[\'snid\']}]" {$network[\'checked\']} value="1" /></td>
</tr>
<tr>
<td colspan="3"><span class="smalltext">{$network[\'sn_label\']}</span></td>
</tr>'),
'version' => intval(1614),
'dateline' => TIME_NOW,
'sid' => -1
)
);
$db->insert_query('templates',
array(
'title' => 'usersocial_usercp',
'template' => $db->escape_string('<fieldset class="trow2">
<legend><strong>{$lang->usersocial}</strong></legend>
<table cellspacing="0" cellpadding="5">
<tr>
<th>{$lang->usersocial_network}</th>
<th>{$lang->usersocial_username}</th>
<th>{$lang->usersocial_private}</th>
</tr>
{$usersocial_rows}
</table>
</fieldset>'),
'version' => intval(1614),
'dateline' => TIME_NOW,
'sid' => -1
)
);
require_once MYBB_ROOT.'/inc/adminfunctions_templates.php';
find_replace_templatesets('postbit', '#'.preg_quote('{$post[\'user_details\']}').'#', '{$post[\'user_details\']}{$post[\'usersocial\']}');
find_replace_templatesets('postbit_classic', '#'.preg_quote('{$post[\'user_details\']}').'#', '{$post[\'user_details\']}{$post[\'usersocial\']}');
find_replace_templatesets('member_profile', '#'.preg_quote('<td class="{$bgcolors[\'msn\']}"><a href="javascript:;" onclick="MyBB.popupWindow(\'misc.php?action=imcenter&imtype=msn&uid={$uid}\', \'imcenter\', 450, 300);">{$memprofile[\'msn\']}</a></td>').'#', '<td class="{$bgcolors[\'msn\']}"><a href="javascript:;" onclick="MyBB.popupWindow(\'misc.php?action=imcenter&imtype=msn&uid={$uid}\', \'imcenter\', 450, 300);">{$memprofile[\'msn\']}</a></td>{$memprofile[\'usersocial\']}');
find_replace_templatesets('usercp_profile', '#'.preg_quote('{$awaysection}').'#', '{$usersocial}{$awaysection}');
rebuild_settings();
}
function usersocial_deactivate()
{
global $db, $mybb;
$db->delete_query('templates', "title LIKE 'usersocial%'");
require_once MYBB_ROOT.'/inc/adminfunctions_templates.php';
find_replace_templatesets('postbit', '#'.preg_quote('{$post[\'usersocial\']}').'#', '', 0);
find_replace_templatesets('postbit_classic', '#'.preg_quote('{$post[\'usersocial\']}').'#', '', 0);
find_replace_templatesets('member_profile', '#'.preg_quote('{$memprofile[\'usersocial\']}').'#', '', 0);
find_replace_templatesets('usercp_profile', '#'.preg_quote('{$usersocial}').'#', '', 0);
rebuild_settings();
}
function usersocial_action_handler(&$action)
{
$action['usersocial'] = array('active' => 'usersocial', 'file' => 'usersocial');
}
function usersocial_admin_permissions(&$admin_permissions)
{
global $lang;
$lang->load('usersocial');
$admin_permissions['usersocial'] = $lang->usersocial_admin_action;
}
function usersocial_admin_load()
{
global $run_module, $action_file, $lang;
$lang->load('usersocial');
if ($run_module == 'user' && $action_file == 'usersocial')
{
global $mybb, $db, $page, $lang;
$page->add_breadcrumb_item($lang->usersocial, 'index.php?module=user-usersocial');
$page->output_header($lang->usersocial);
$mybb->input['aid'] = intval($mybb->input['aid']);
$mybb->input['uid'] = intval($mybb->input['uid']);
if (!$mybb->input['action'] || in_array($mybb->input['action'], array('add', 'edit')))
{
$sub_tabs['usersocial_view'] = array(
'title' => $lang->usersocial_list,
'link' => 'index.php?module=user-usersocial',
'description' => $lang->usersocial_list_desc
);
$sub_tabs['usersocial_add'] = array(
'title' => $lang->usersocial_add,
'link' => 'index.php?module=user-usersocial&action=add',
'description' => $lang->usersocial_add_desc
);
$sub_tabs['usersocial_edit'] = array(
'title' => $lang->usersocial_edit,
'link' => 'index.php?module=user-usersocial&action=edit',
'description' => $lang->usersocial_edit_desc,
);
}
if (!$mybb->input['action'] || $mybb->input['action'] == 'view')
{
$page->output_nav_tabs($sub_tabs, 'usersocial_view');
$table = new Table();
$table->construct_header($lang->usersocial_icon, array('width' => '10%'));
$table->construct_header($lang->usersocial_network, array('width' => '45%'));
$table->construct_header($lang->usersocial_active, array('width' => '10%', 'class' => 'align_center'));
$table->construct_header($lang->usersocial_profil, array('width' => '10%', 'class' => 'align_center'));
$table->construct_header($lang->usersocial_post, array('width' => '10%', 'class' => 'align_center'));
$table->construct_header($lang->usersocial_action, array('width' => '15%', 'class' => 'align_center'));
$query = $db->simple_select('social_network', "*", "1=1", array("order_by" => 'sn_order', "order_dir" => 'ASC'));
if($db->num_rows($query) < 1)
{
$table->construct_cell('<div align="center">'.$lang->usersocial_no_network.'</div>', array('colspan' => 6));
$table->construct_row();
}
else
{
while ($network = $db->fetch_array($query))
{
$table->construct_cell('<img src="'.usersocial_get_icon($network['sn_image']).'" />', array('class' => 'align_center'));
$table->construct_cell(htmlspecialchars_uni($network['sn_name']));
$table->construct_cell('<img src="../images/usersocial/bullet_'.(($network['sn_active']==0) ? 'red' : 'green').'.png" alt="" title="'.(($network['sn_active']==0) ? $lang->no : $lang->yes).'" />', array('class' => 'align_center'));
$table->construct_cell('<img src="../images/usersocial/bullet_'.(($network['sn_profil']==0) ? 'red' : 'green').'.png" alt="" title="'.(($network['sn_profil']==0) ? $lang->no : $lang->yes).'" />', array('class' => 'align_center'));
$table->construct_cell('<img src="../images/usersocial/bullet_'.(($network['sn_postbit']==0) ? 'red' : 'green').'.png" alt="" title="'.(($network['sn_postbit']==0) ? $lang->no : $lang->yes).'" />', array('class' => 'align_center'));
$popup = new PopupMenu("usersocial_{$network['snid']}", $lang->options);
$popup->add_item($lang->usersocial_edit, "index.php?module=user-usersocial&action=edit&snid={$network['snid']}");
$popup->add_item($lang->usersocial_del, "index.php?module=user-usersocial&action=delete&snid={$network['snid']}");
$table->construct_cell($popup->fetch(), array('class' => 'align_center'));
$table->construct_row();
}
}
$db->free_result($query);
$table->output($lang->usersocial_network);
}
elseif ($mybb->input['action'] == 'add')
{
if ($mybb->request_method == 'post')
{
if ($mybb->input['sn_name'] == '')
{
flash_message($lang->usersocial_add_error, 'error');
admin_redirect("index.php?module=user-usersocial&action=add");
}
$insert = array(
'sn_name' => $mybb->input['sn_name'],
'sn_label' => $mybb->input['sn_label'],
'sn_active' => $mybb->input['sn_active'],
'sn_profil' => $mybb->input['sn_profil'],
'sn_postbit' => $mybb->input['sn_postbit'],
'sn_link' => $mybb->input['sn_link'],
'sn_image' => $mybb->input['sn_image'],
'sn_order' => $mybb->input['sn_order']
);
log_admin_action($lang->usersocial_new_network . ' : '.$insert['sn_name']);
usersocial_add_network($insert);
flash_message($lang->usersocial_add_success, 'success');
admin_redirect("index.php?module=user-usersocial");
}
$page->output_nav_tabs($sub_tabs, 'usersocial_add');
$form = new Form('index.php?module=user-usersocial&action=add', "post");
$form_container = new FormContainer($lang->usersocial_add_network);
$form_container->output_row($lang->usersocial_row_name, $lang->usersocial_row_name_desc, $form->generate_text_box('sn_name'));
$form_container->output_row($lang->usersocial_row_label, $lang->usersocial_row_label_desc, $form->generate_text_area('sn_label', '', array('rows' => 5, 'style' => 'width:80%;')));
$form_container->output_row($lang->usersocial_row_active, $lang->usersocial_row_active_desc, $form->generate_yes_no_radio('sn_active'));
$form_container->output_row($lang->usersocial_row_profil, $lang->usersocial_row_profil_desc, $form->generate_yes_no_radio('sn_profil'));
$form_container->output_row($lang->usersocial_row_postbit, $lang->usersocial_row_postbit_desc, $form->generate_yes_no_radio('sn_postbit'));
$form_container->output_row($lang->usersocial_row_link, $lang->usersocial_row_link_desc, $form->generate_text_box('sn_link'));
$form_container->output_row($lang->usersocial_row_icon, $lang->usersocial_row_icon_desc, $form->generate_text_box('sn_image'));
$form_container->output_row($lang->usersocial_row_order, $lang->usersocial_row_order_desc, $form->generate_text_box('sn_order'));
$form_container->end();
$buttons = array();
$buttons[] = $form->generate_submit_button($lang->usersocial_add);
$buttons[] = $form->generate_reset_button($lang->usersocial_cancel);
$form->output_submit_wrapper($buttons);
$form->end();
}
elseif ($mybb->input['action'] == 'edit')
{
if(!($network = usersocial_get_network($mybb->input['snid'])))
{
flash_message($lang->usersocial_edit_none, 'error');
admin_redirect("index.php?module=user-usersocial");
}
if ($mybb->request_method == 'post')
{
if ($mybb->input['sn_name'] == '')
{
flash_message($lang->usersocial_edit_error, 'error');
admin_redirect("index.php?module=user-usersocial&action=edit");
}
$update = array(
'sn_name' => $mybb->input['sn_name'],
'sn_label' => $mybb->input['sn_label'],
'sn_active' => $mybb->input['sn_active'],
'sn_profil' => $mybb->input['sn_profil'],
'sn_postbit' => $mybb->input['sn_postbit'],
'sn_link' => $mybb->input['sn_link'],
'sn_image' => $mybb->input['sn_image'],
'sn_order' => $mybb->input['sn_order']
);
log_admin_action($lang->usersocial_edit_network . ' : '.$update['sn_name']);
usersocial_update_network($network['snid'], $update);
flash_message($lang->usersocial_edit_success, 'success');
admin_redirect("index.php?module=user-usersocial");
}
$page->output_nav_tabs($sub_tabs, 'usersocial_edit');
$form = new Form("index.php?module=user-usersocial&action=edit&snid={$network['snid']}", "post");
$form_container = new FormContainer($lang->usersocial_edit_network);
$form_container->output_row($lang->usersocial_row_name, $lang->usersocial_row_name_desc, $form->generate_text_box('sn_name', $network['sn_name']));
$form_container->output_row($lang->usersocial_row_label, $lang->usersocial_row_label_desc, $form->generate_text_area('sn_label', htmlspecialchars_uni($network['sn_label']), array('rows' => 5, 'style' => 'width:80%;')));
$form_container->output_row($lang->usersocial_row_active, $lang->usersocial_row_active_desc, $form->generate_yes_no_radio('sn_active', intval($network['sn_active'])));
$form_container->output_row($lang->usersocial_row_profil, $lang->usersocial_row_profil_desc, $form->generate_yes_no_radio('sn_profil', intval($network['sn_profil'])));
$form_container->output_row($lang->usersocial_row_postbit, $lang->usersocial_row_postbit_desc, $form->generate_yes_no_radio('sn_postbit', intval($network['sn_postbit'])));
$form_container->output_row($lang->usersocial_row_link, $lang->usersocial_row_link_desc, $form->generate_text_box('sn_link', htmlspecialchars_uni($network['sn_link'])));
$form_container->output_row($lang->usersocial_row_icon, $lang->usersocial_row_icon_desc, $form->generate_text_box('sn_image', htmlspecialchars_uni($network['sn_image'])));
$form_container->output_row($lang->usersocial_row_order, $lang->usersocial_row_order_desc, $form->generate_text_box('sn_order', intval($network['sn_order'])));
$form_container->end();
$buttons = array();
$buttons[] = $form->generate_submit_button($lang->usersocial_add);
$form->output_submit_wrapper($buttons);
$form->end();
}
elseif($mybb->input['action'] == 'delete')
{
if(!($network = usersocial_get_network($mybb->input['snid'])) || ($mybb->request_method == 'post' && $mybb->input['my_post_key'] != $mybb->post_code) || $mybb->input['no'])
{
if(!$mybb->input['no'])
{
flash_message($lang->usersocial_del_error, 'error');
}
admin_redirect("index.php?module=user-usersocial");
}
if($mybb->request_method == 'post')
{
log_admin_action($lang->usersocial_del_network . ' : '.$network['sn_name'], $network['snid']);
usersocial_delete_network($network['snid']);
flash_message($lang->usersocial_del_success, 'success');
admin_redirect("index.php?module=user-usersocial");
}
$form = new Form("index.php?module=user-usersocial&action=delete&snid={$network['snid']}&my_post_key={$mybb->post_code}", 'post');
echo("
<div class=\"confirm_action\">\n
<p>". $lang->usersocial_del_confirm."</p><br />\n
<p class=\"buttons\">
{$form->generate_submit_button($lang->yes, array('class' => 'button_yes'))}
{$form->generate_submit_button($lang->no, array("name" => "no", 'class' => 'button_no'))}
</p>\n
</div>
");
$form->end();
}
$page->output_footer();
}
}
function usersocial_add_network($data)
{
global $db;
if (!is_array($data))
{
$data = array();
}
if ($data['sn_name'])
{
$data['sn_name'] = $db->escape_string($data['sn_name']);
}
if ($data['sn_label'])
{
$data['sn_label'] = $db->escape_string($data['sn_label']);
}
if ($data['sn_active'])
{
$data['sn_active'] = intval($data['sn_active']);
}
if ($data['sn_profil'])
{
$data['sn_profil'] = intval($data['sn_profil']);
}
if ($data['sn_postbit'])
{
$data['sn_postbit'] = intval($data['sn_postbit']);
}
if ($data['sn_image'])
{
$data['sn_image'] = $db->escape_string($data['sn_image']);
}
if ($data['sn_order'])
{
$data['sn_order'] = intval($data['sn_order']);
}
$db->insert_query('social_network', $data);
}
function usersocial_update_network($snid, $data)
{
global $db;
if (!is_array($data))
{
$data = array();
}
if ($data['sn_name'])
{
$data['sn_name'] = $db->escape_string($data['sn_name']);
}
if ($data['sn_label'])
{
$data['sn_label'] = $db->escape_string($data['sn_label']);
}
if ($data['sn_active'])
{
$data['sn_active'] = intval($data['sn_active']);
}
if ($data['sn_profil'])
{
$data['sn_profil'] = intval($data['sn_profil']);
}
if ($data['sn_postbit'])
{
$data['sn_postbit'] = intval($data['sn_postbit']);
}
if ($data['sn_image'])
{
$data['sn_image'] = $db->escape_string($data['sn_image']);
}
if ($data['sn_order'])
{
$data['sn_order'] = intval($data['sn_order']);
}
$db->update_query('social_network', $data, "snid='{$snid}'");
}
function usersocial_delete_network($snid)
{
global $db;
$snid = intval($snid);
$db->delete_query('social_network', "snid='{$snid}'");
$db->delete_query('social_user_network', "snid='{$snid}'");
}
function usersocial_get_icon($img)
{
global $mybb;
$image = $mybb->settings['bburl'].'/images/usersocial/default.png';
if(my_strpos($img, "ttp:/"))
{
$image = $img;
}
if(!my_strpos($img, "/") && !empty($img) && file_exists(MYBB_ROOT.'/images/usersocial/'.$img))
{
$image = $mybb->settings['bburl'].'/images/usersocial/'.htmlspecialchars_uni($img);
}
if(!empty($img) && file_exists(MYBB_ROOT.'/images/'.$img))
{
$image = $mybb->settings['bburl'].'/images/'.htmlspecialchars_uni($img);
}
return $image;
}
function usersocial_get_network($snid)
{
global $db;
$snid = intval($snid);
$query = $db->simple_select('social_network', '*', "snid='{$snid}'");
$network = $db->fetch_array($query);
$db->free_result($query);
if($network['snid'])
{
return $network;
}
return false;
}
function usersocial_postbit(&$post)
{
global $db, $mybb, $templates;
$post['usersocial'] = '';
$sql = "SELECT s.sn_name, s.sn_link, s.sn_image, u.sn_value
FROM ".TABLE_PREFIX."social_network s, ".TABLE_PREFIX."social_user_network u
WHERE s.snid=u.snid AND u.uid='".$post['uid']."' AND u.sn_private=0 AND u.sn_value<>'' AND s.sn_active=1 AND s.sn_postbit=1
ORDER BY s.sn_order ASC";
$query = $db->query($sql);
if ($db->num_rows($query)>0) {
$post['usersocial'] = '<br />';
while ($network = $db->fetch_array($query)) {
$network['sn_link'] = str_replace('#username#', htmlspecialchars($network['sn_value'], ENT_QUOTES), $network['sn_link']);
$network['sn_image'] = usersocial_get_icon($network['sn_image']);
eval("\$post['usersocial'] .= \"".$templates->get("usersocial_postbit")."\";");
}
}
}
function usersocial_profile()
{
global $db, $mybb, $templates, $memprofile, $lang;
$lang->load('usersocial');
$memprofile['usersocial'] = '';
$sql = "SELECT s.sn_name, s.sn_link, s.sn_image, u.sn_value, u.sn_private
FROM ".TABLE_PREFIX."social_network s
LEFT JOIN ".TABLE_PREFIX."social_user_network u ON ( u.snid = s.snid AND u.uid=".$mybb->user['uid'].")
WHERE s.sn_active=1 AND s.sn_profil=1
ORDER BY s.sn_order ASC";
$query = $db->query($sql);
if ($db->num_rows($query)>0) {
$cpt = 0;
$tr = '</tr><tr>';
while ($network = $db->fetch_array($query)) {
$cpt++;
$network['even'] = ($cpt%2)+1;
if ($network['sn_private']==1 || trim($network['sn_value'])=='')
{
$network['ulink'] = '';
}
else
{
$network['ulink'] = '<a href="'.str_replace('#username#', htmlspecialchars($network['sn_value'], ENT_QUOTES), $network['sn_link']).'">'. $lang->usersocial_contact .' '.$network['sn_name'].'</a>';
}
eval("\$memprofile['usersocial'] .= \"</tr><tr>".$templates->get("usersocial_member_profile_row")."\";");
}
}
}
function usersocial_usercp()
{
global $db, $mybb, $templates, $usersocial, $usersocial_rows, $lang;
$lang->load('usersocial');
$sql = "SELECT s.snid, s.sn_name, s.sn_link, s.sn_image, s.sn_label, u.sn_value, u.sn_private
FROM ".TABLE_PREFIX."social_network s
LEFT JOIN ".TABLE_PREFIX."social_user_network u ON ( u.snid = s.snid AND u.uid=".$mybb->user['uid'].")
WHERE s.sn_active=1
ORDER BY s.sn_order ASC";
$query = $db->query($sql);
$usersocial = '';
if ($db->num_rows($query)>0)
{
$usersocial_rows = '';
while ($network = $db->fetch_array($query)) {
if ($network['sn_private']==1)
{
$network['checked'] = ' checked="checked"';
}
eval("\$usersocial_rows .= \"".$templates->get('usersocial_usercp_row')."\";");
}
eval("\$usersocial .= \"".$templates->get('usersocial_usercp')."\";");
}
}
function usersocial_update_user()
{
global $db, $mybb;
if($mybb->input['action'] == "do_profile" && $mybb->request_method == "post")
{
$db->delete_query('social_user_network', 'uid='.$mybb->user['uid']);
foreach($mybb->input['sn'] as $k => $v) {
if (isset($mybb->input['snp'][$k]) && $mybb->input['snp'][$k]==1)
{
$mybb->input['snp'][$k] = 1;
}
else
{
$mybb->input['snp'][$k] = 0;
}
$userdata = array(
'snid' => intval($k),
'uid' => intval($mybb->user['uid']),
'sn_value' => $db->escape_string(trim($v)),
'sn_private' => $mybb->input['snp'][$k]
);
$db->insert_query('social_user_network', $userdata);
}
}
}
# 0day.today [2018-01-08] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
05 Sep 2014 00:00Current
7.1High risk
Vulners AI Score7.1