free tube script w/auto updating embed codes

**c0ld** · 04-14-2008, 10:54 PM

Got a demo?

**mryellow** · 04-15-2008, 04:51 PM

addon which will be available for a small fee which will import embed codes from some of the top tube sites.

Bad idea..... The listings on a site are copyright.

Steal thehun's or PKs links and start a TGP with them and see how that goes down.

-Ben

**Jace** · 04-15-2008, 04:56 PM

Originally posted by mryellow

Bad idea..... The listings on a site are copyright.

Steal thehun's or PKs links and start a TGP with them and see how that goes down.

-Ben

if the site in question has an embed code for others to share the video, then what is wrong?

**SmokeyTheBear** · 04-15-2008, 04:59 PM

Originally posted by mryellow

Bad idea..... The listings on a site are copyright.

Steal thehun's or PKs links and start a TGP with them and see how that goes down.

-Ben

i dont see how that would be a problem. I can certainly start a tgp and copy the hun's links onto my site. if i copy his link text or logo's i might have a problem , but theres no law against having the same links as another site as far as i am aware

**mryellow** · 04-15-2008, 06:14 PM

Sure if they syndicate their feed for others to use and you use it within the TOS.
However don't just suck videos outta pages or anything like that.

Yeah Smokey there was a massive blowup about it a while back, people were being
hunted for stealing links. Courts have shown that the specific collection of links on a site
are copyright the site-owner.

Just like the dictionary has words in it which anyone can use.....
It is still copyright violation to copy a whole dictionary into a new one. (red herrings)

People put alot of hours into building relationships and reviewing submissions, tailoring their site to the market
and weeding out the bad stuff...... If you come along and steal that work and the site-owner knows the
value of that work, and the profit you're making from said work..... you will be sued.

-Ben

**Chr0makey** · 04-15-2008, 07:35 PM

Sounds interesting. Let me know when you have something up.

**qxm** · 04-15-2008, 07:46 PM

very interesting indeed......... hit me up when u have everything ready 266-990-876

**johnuno11** · 04-15-2008, 07:55 PM

I'm interested.

**d-null** · 04-15-2008, 08:02 PM

good luck with the project

**SmokeyTheBear** · 04-15-2008, 08:12 PM

Originally posted by mryellow

Yeah Smokey there was a massive blowup about it a while back, people were being
hunted for stealing links. Courts have shown that the specific collection of links on a site
are copyright the site-owner.

i don't doubt that it would be frowned upon , but hadnt seen any cases of it in the legal world unless there was more to it.

i once had a guy long ago furious for me linking to his site and it was just a simple text link, anyways he made legal threats many times , so i put his link on every page just to piss him off, i never heard back from him

**lazycash** · 04-15-2008, 08:24 PM

Originally posted by mryellow

Sure if they syndicate their feed for others to use and you use it within the TOS.
However don't just suck videos outta pages or anything like that.

Yeah Smokey there was a massive blowup about it a while back, people were being
hunted for stealing links. Courts have shown that the specific collection of links on a site
are copyright the site-owner.

Just like the dictionary has words in it which anyone can use.....
It is still copyright violation to copy a whole dictionary into a new one. (red herrings)

People put alot of hours into building relationships and reviewing submissions, tailoring their site to the market
and weeding out the bad stuff...... If you come along and steal that work and the site-owner knows the
value of that work, and the profit you're making from said work..... you will be sued.

-Ben

Many of the tube sites purposefully post their embed codes so people will post their videos on other sites. Sure it may cost them bandwidth, but most have their site branding and advertising built into their video player. You may have a point with the tgp, but you're off base on this one.

**mryellow** · 04-15-2008, 08:30 PM

The Hun, The Hun's Yellow Pages and thehun.net are registered trademarks; the layout and particular characteristics in which these pages appear have full copyright. Any violation of these rights like copying or reproducing these pages are illegal and will be prosecuted to the full extents of the law. "The Hun's Yellow Pages," as a compilation of pre-existing URLs, based upon the selective assembly of specific links from among the universe of available links, is protected under the U.S. Copyright Act, as amended, and the Berne Convention on Copyrights. The Hun expends significant time, energy and resources in bringing you his daily page. Accordingly, individuals or entities identified as copying links from the Hun's Yellow Pages will be considered copyright infringers and will be pursued to the fullest extent of the law.

It's a compilation and copyright.

Steal his links and see :-)

edit: like I said.... It's ok if they allow it..... If you're just ripping vids it's far from ok.

-Ben

**lazycash** · 04-15-2008, 08:36 PM

Originally posted by mryellow

It's a compilation and copyright.

Steal his links and see :-)

edit: like I said.... It's ok if they allow it..... If you're just ripping vids it's far from ok.

-Ben

The original poster never said anything about ripping vids, he said importing embed codes.

**SmokeyTheBear** · 04-15-2008, 09:53 PM

Originally posted by mryellow

It's a compilation and copyright.

Steal his links and see :-)

-Ben

anyone can say anything is copyright , but will it stand up in court i dont know.

also i notice 2 important points you brought up.. #1 u.s. copyright and #2 the berne convention.. there are countries that havent signed the berne convention.

p.s. i did build a hun ripper , it grabs the huns latest galleries and turns the galleries into long videos. Its actually quite a cool tool. I didnt think it was a problem really, it would be awfully hard to steal thehun's thunder especially when most of the galleries have his thumb so even if someone recreated an exact replica of the hun , all the branding is thehun's

**NinjaSteve** · 04-16-2008, 12:08 AM

Sounds cool. I like the demo in your sig.

**viencarl** · 04-16-2008, 03:15 AM

your demo is wow

**farkedup** · 04-16-2008, 02:18 PM

sorry I ended up being busy last night, I'm working on it some more now and will have a demo online tonight sometime along with a download link.

the demo link is the paid full system LOL the free one is going to be pretty limited... Trying to figure out what layout I want to use with the free version right now. I'm probably just going to keep it super simple so that people can customize it easier.

**karlm** · 04-16-2008, 02:23 PM

Wow that looks sweet mate

**x0pa** · 04-16-2008, 04:00 PM

hit me up im interested

**Babaganoosh** · 04-16-2008, 04:09 PM

Originally posted by SmokeyTheBear

anyone can say anything is copyright , but will it stand up in court i dont know.

also i notice 2 important points you brought up.. #1 u.s. copyright and #2 the berne convention.. there are countries that havent signed the berne convention.

p.s. i did build a hun ripper , it grabs the huns latest galleries and turns the galleries into long videos. Its actually quite a cool tool. I didnt think it was a problem really, it would be awfully hard to steal thehun's thunder especially when most of the galleries have his thumb so even if someone recreated an exact replica of the hun , all the branding is thehun's

As I remember the ruling was that a list of links is a database and a database can be protected by copyright. This was all very relevant to me at the time since I was selling a directory TGP script that was capable of harvesting links from other sites.

**farkedup** · 04-16-2008, 06:04 PM

This is just modified version of a system I had out like a year ago http://entertainmentscript.com/free/ still in that old template, I'll get around to a more pornhub type layout sometime... if anybody could donate some time to putting something else together I'd appreciate it and get them into a beta for the embed code addon ;)

**farkedup** · 04-16-2008, 06:53 PM

http://entertainmentscript.com/free/free.zip

I didn't get the category display/links put back in yet LOL but I'm heading to bed... I'll get some more work done on this in a few days.

**Scroto** · 04-16-2008, 10:34 PM

Originally posted by farkedup

This is just modified version of a system I had out like a year ago http://entertainmentscript.com/free/ still in that old template, I'll get around to a more pornhub type layout sometime... if anybody could donate some time to putting something else together I'd appreciate it and get them into a beta for the embed code addon ;)

Is it just me or does the ratings not work?

**CyberHustler** · 04-16-2008, 10:43 PM

Sounds nice!

**farkedup** · 04-17-2008, 09:46 AM

Originally posted by Scroto

Is it just me or does the ratings not work?

In the DB I still had it set for running on localhost LMAO will be fixing this in a minute.

**Scroto** · 04-17-2008, 10:34 AM

Originally posted by farkedup

In the DB I still had it set for running on localhost LMAO will be fixing this in a minute.

oops lol looks pretty nice otherwise for a free script

**Phil** · 04-17-2008, 10:40 AM

good one, ill take a copy

**farkedup** · 04-17-2008, 10:51 AM

Originally posted by Scroto

oops lol looks pretty nice otherwise for a free script

I develop everything locally so I can just hit save in dreamweaver and refresh the page instead of also uploading things. Saves a ton of time when you're doing small edits.

All that you'll need to modify the ads are simply things in the ads/ folder. If you want basic ad rotations its actually quite simple. I'll post up some instructions for this soon.

**suzieg** · 04-17-2008, 12:37 PM

I am interested. I am free right now and can reserve the entire weekend to getting it up.

**jimbona** · 04-17-2008, 02:07 PM

It might just be me, but reviewing the source it seems its open to injection via _GET and _POST data as it is loaded directly into the SQL queries so hackers will have a field day with this like other free scripts with uncleansed data to SQL.

**Barefootsies** · 04-17-2008, 02:17 PM

Originally posted by jimbona

It might just be me, but reviewing the source it seems its open to injection via _GET and _POST data as it is loaded directly into the SQL queries so hackers will have a field day with this like other free scripts with uncleansed data to SQL.

**d-null** · 04-17-2008, 02:37 PM

Originally posted by jimbona

........like other free scripts..........

just because something is free is not a reason, just as the fact that just because something isn't free doesn't mean it is safe

**farkedup** · 04-17-2008, 02:40 PM

Originally posted by jimbona

It might just be me, but reviewing the source it seems its open to injection via _GET and _POST data as it is loaded directly into the SQL queries so hackers will have a field day with this like other free scripts with uncleansed data to SQL.

sorry it is, I was using a REALLY old codebase of mine. I'll have that fixed up in like 20 minutes or so ;)

**jimbona** · 04-17-2008, 02:43 PM

Originally posted by jetjet

just because something is free is not a reason, just as the fact that just because something isn't free doesn't mean it is safe

I know this, im just speaking from the perspective of being around when other known scripts which were free were hacked and became an epidemic:P

Yes, even paid scripts are not safe either, but with free you can review source(anyone can) but with a paid product a person would have to spend money first, then have to review to script.

Anyway, just raising awareness that people should review the code before putting it live on a site and wondering why it was hacked so quickly.

**farkedup** · 04-17-2008, 02:45 PM

with a quick scan it looks like rating.php is the only file that actually takes user data up top simply changing to this:

Code:

$gameid			= mysql_real_escape_string($_POST['gameid']);
$gameid2		= mysql_real_escape_string($_POST['gameid']);
$score			= mysql_real_escape_string($_POST['score']);

cleans the data before MySQL actually uses it. I'm going to keep looking around for anything outside the admin panel but with a quick look that appears to be the only thing vulnerable.

**jimbona** · 04-17-2008, 02:48 PM

Originally posted by farkedup

sorry it is, I was using a REALLY old codebase of mine. I'll have that fixed up in like 20 minutes or so ;)

I know its an old codebase, im seen it used several times.

You may also want to check the admin for references to games/game files and they wont be relevant in a video embed site.

**jimbona** · 04-17-2008, 02:57 PM

Originally posted by farkedup

with a quick scan it looks like rating.php is the only file that actually takes user data up top

Might want to recheck,

files open to abuse:

category.php-$cid
search.php-$cid-$search
play.php-$id-$id2

function/template files could be open to abuse if register_globals is on.

**farkedup** · 04-17-2008, 03:00 PM

I'm uploading a minor update now that fixes the work game in a few places along with that rating.php update and an updated config.php that simply added this:

Code:

if (isset($_POST)){
$ip2 = (empty($_SERVER['REMOTE_ADDR'])) ? 'empty' : $_SERVER['REMOTE_ADDR'];
$ua = (empty($_SERVER['HTTP_USER_AGENT'])) ? 'empty' : $_SERVER['HTTP_USER_AGENT'];
$ru = (empty($_SERVER['REQUEST_URI'])) ? 'empty' : $_SERVER['REQUEST_URI'];
$rm = (empty($_SERVER['REQUEST_METHOD'])) ? 'empty' : $_SERVER['REQUEST_METHOD'];
if ($ua == "empty") { exit();}   
if ($ua == "-") 	{ exit();}
if ($ip2 == "empty"){ exit();} 
if ($ru == "empty") {exit();}   
if ($rm == "empty") { exit();}   
}

it rejects forms from various bots

**qxm** · 04-17-2008, 03:14 PM

Originally posted by jimbona

It might just be me, but reviewing the source it seems its open to injection via _GET and _POST data as it is loaded directly into the SQL queries so hackers will have a field day with this like other free scripts with uncleansed data to SQL.

**farkedup** · 04-17-2008, 03:22 PM

alright, just uploaded a version that cleans get and post vars where needed.

**PornGeneral** · 04-17-2008, 03:30 PM

Code:

$_POST = array_map('mysql_real_escape_string', $_POST);
$_GET = array_map('mysql_real_escape_string', $_GET);
$_COOKIE = array_map('mysql_real_escape_string', $_COOKIE);

Code:

function clean($value){	
   if (get_magic_quotes_gpc()) {	
     $value = stripslashes($value);
   }
   if (!is_numeric($value)) {
     $value = mysql_real_escape_string($value);
   }

 return $value;
} 
array_walk($_GET,'clean');
array_walk($_POST,'clean');
array_walk($_COOKIE,'clean'); 
extract($_GET,EXTR_PREFIX_ALL,'get');
extract($_POST,EXTR_PREFIX_ALL,'post');
extract($_COOKIE,EXTR_PREFIX_ALL,'cookie');

Some old code I use to clean up so far no issues

**PornGeneral** · 04-17-2008, 04:04 PM

Don't forget some xss cleaning functions

Code:

// Prep user input for storage - XSS cleanup
function xss_input($input) { 
    $input = trim($input); 
    if (!get_magic_quotes_gpc()) { 
        return addslashes($input); 
    } 
    return $input; 
} 

// Prep user inputed data for viewing in html page, textbox, or textarea
function xss_output($output) { 
    $output = stripslashes($output); 
    return htmlspecialchars($output); 
}

**farkedup** · 04-17-2008, 04:52 PM

this is a variation of what I use in some other scripts which I just put into this one:

Code:

foreach($_POST as $varName => $value)
  {
     $dv=$value;
if (get_magic_quotes_gpc()) {	 $$varName = stripslashes($dv); }
if (!is_numeric($value)) {    $$varName = mysql_real_escape_string($dv);  }
   }; 
   
   foreach($_GET as $varName => $value)
  {
    $dv=$value;
if (get_magic_quotes_gpc()) {	 $$varName = stripslashes($dv); }
if (!is_numeric($value)) {    $$varName = mysql_real_escape_string($dv);  }
   };

**Doctor Feelgood** · 04-17-2008, 06:39 PM

1) can you have the videos higher up the page so i dont have to scroll down?

2) can the 300x250 adspace be edited to 250x250 by webmaster?

**Boozer** · 04-17-2008, 06:49 PM

Just so you know, your template does not look right under firefox

**SmokeyTheBear** · 04-17-2008, 06:52 PM

you should get icq

**farkedup** · 04-17-2008, 07:40 PM

Originally posted by Doctor Feelgood

1) can you have the videos higher up the page so i dont have to scroll down?

2) can the 300x250 adspace be edited to 250x250 by webmaster?

1) I don't have to scroll ;) the box above the videos can be tossed down under simple enough. Edit templates/play_content.tpl

2) thats easy enough, go into ads/250x250.tpl I actually don't see 300x250 ads, 250x250 is used everywhere I'm seeing.

**x0pa** · 04-18-2008, 08:33 AM

so... is the new version more secure now?

**farkedup** · 04-18-2008, 09:45 AM

Originally posted by x0pa

so... is the new version more secure now?

yes, right before my post above I had applied some security updates to the package.

free tube script w/auto updating embed codes

free tube script w/auto updating embed codes

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment