vbAccessDenied

[hambil]

Keywords: admincp, access denied, forum access, access, user, admin, usergroup


This modification contains a MySQL injection vulnerability, and you are hereby advised to unintall this modification until such time that the author provides a fix.
-- vBorg Staff


Description:
A powerful tool for customizing the generic vBulletin access denied message.

Translations
German (http://www.vbhacks-germany.com/forum/showthread.php?t=3606) (Thanks to alluidh)

Features:

Fully Phrased.
Turn on or off in admin cp.
Created a custom message for any vBulletin generic access denied message.
Personalize messages with any user, forum or usergroup information.
Automatically send a PM to one or more users the first time a member receives a specific access denied message.
Personalize the PM with any user, forum or usergroup information.
Add an approval link to the automatic PM that will give the user a new primary or secondary usergroup of your choice when clicked.
Send a PM to everyone who received the original access request, and the requesting user, when they are approved.
Several layers of security.Use Case
On my board we only allow access to a few forums until a user has been approved by an admin. The sample screen shots show this process in action.

Install
Download the vbAccessDenied_1.0.zip file.
Unzip and upload the files in the upload directory to your forum root.
Import the product file in your admincp.
Create custom messages as desired.1.1 Changes
Supports bbcodes in messages (see updated screen shot).
Fixed sql bug that prevented many messages from showing properly.
Removed 255 character limit on messages.Upgrade from 1.0 to 1.1
You will need to reupload all files, and uninstall and reinstall the product to upgrade from 1.0 to 1.1. Please copy your messages to a text editor first if you want to save them.

[hambil]

First post reserved.

[IrPr]

YAY! what i was waiting for
First Click;) Thanks!

will test on my board

[goblues]

Will check out. Should prove to be a great addition!

[IrPr]

Works Fine for me! Thanks again
is it possible to report IP in private message? cause i'm using this mod for unregistered users!

[hambil]

Works Fine for me! Thanks again
is it possible to report IP in private message? cause i'm using this mod for unregistered users!
Sure. You can report any user field. For ip just use {user.ipaddress}

[COBRAws]

this is damn good!

[Antivirus]

This is a great idea, gonna try this... I was never happy with the generic denied message...

Also, pretty smart to put keywords for the hack in the top of the first post - nice!

[hambil]

Found a serious sql bug and fixed it. You should re-install. No need to uninstall or upload files - just download the product file again and re-import it.

[projectego]

This sounds interesting, I'll give it a try this evening. Already clicked install by the way. :)

[Xplorer4x4]

Well you can change the access denied message by editing a phrase, but this far surpases that option. This look to be a GREAt hack.

Thank you!

[GamerzWorld]

Cant seem to get it to work, where will the error message display?

[hambil]

Cant seem to get it to work, where will the error message display?
By just installing it won't do anything. You have to create custom messages.

The messages will then display when a user tries to do something they don't have access for, if you've created a message for that case. Otherwise they will get the default vBulletin message.

If you tell me what you are trying to do I might be able to help walk you through it. :)

[GamerzWorld]

By just installing it won't do anything. You have to create custom messages.

The messages will then display when a user tries to do something they don't have access for, if you've created a message for that case. Otherwise they will get the default vBulletin message.

If you tell me what you are trying to do I might be able to help walk you through it. :)

I have several clans on my site. I am trying to make it so that when someone tries to access a private clan forum they are applied for the usergroup of there clan needed for the access. Here is an example of the custom message I added yet it did not display..

Usergroup: Register users
Forum: Private Forum, Spiritual Connections USA
Script: * - Not sure if I should set to somethging?
Send PM : Yes
PM test: this is a test
Users: Merlin
Add a link to approve: Yes
Usergroup : SpiritualMember[USA]

Hope you get the idea :banana:

[hambil]

How is access to "Private Forum, Spiritual Connections USA" set? If they can view it, but not post or create threads, then they won't get the message until they try to create a thread or post.

[bada_bing]

Nice idea will reserve for future use

[GamerzWorld]

How is access to "Private Forum, Spiritual Connections USA" set? If they can view it, but not post or create threads, then they won't get the message until they try to create a thread or post.

Is there no way that when they enter they try to enter the forum it gives the message?

[hambil]

Is there no way that when they enter they try to enter the forum it gives the message?
I believe the problem is a vBulletin problem. If the forum is visible they can enter it. If it isn't visible they don't even see it. If you mark it as not visible and they try to access it via a bookmark or other url, they will get the message.

[GamerzWorld]

I believe the problem is a vBulletin problem. If the forum is visible they can enter it. If it isn't visible they don't even see it. If you mark it as not visible and they try to access it via a bookmark or other url, they will get the message.

Cant seem to get it to work >.< Doesnt seem to be added

p.s. is it possible to make users apply for a usergroup in the error rather than use this system

[hambil]

Cant seem to get it to work >.< Doesnt seem to be added
If you want to give me access I can take a look at your site and see what the problem is. Or you can give me some screen shots of usergroup/forum permissions, and your vbAccessDenied setup and I'll see if I can spot the problem.

[hambil]

Cant seem to get it to work >.< Doesnt seem to be added

p.s. is it possible to make users apply for a usergroup in the error rather than use this system
It should be. Just include your own bbcode link in the error. The easiest way is to find the button/link that does the work in vBulletin, and mimick the url it is using.

[GamerzWorld]

If you want to give me access I can take a look at your site and see what the problem is. Or you can give me some screen shots of usergroup/forum permissions, and your vbAccessDenied setup and I'll see if I can spot the problem.

WIll pm you my IM contacts and give you admin access on account registerd :banana:

[hambil]

Thanks to Gamerz I've realized that vbAccessDenied needs integration with vBulletin's group functions. I'll add this. I also plan on adding a new {matchlist} subsitution variable, that will list all users with matching ips to the one requesting access. Should be done by the weekend :)

[pugmy]

great idea. it seems very useful.

ive encountered an error after installing it and trying to login. any idea?

Invalid SQL:

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid =
AND (script = 'index(*)' OR script = '*');

MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server
version for the right syntax to use near 'AND (script = 'index(*)' OR script = '*')' at line 4
Error Number : 1064

[hambil]

Well, you've got a blank forumid. What exactly are you doing when you get this message?

[hambil]

Anyway, it's a bug either way. I'll fix it and reupload in a bit.

[pugmy]

I was tying to access index.php for logging in. Then the sql error popped. After the installation, I haven't changed any setting for vbAccessDenied. I just installed it and tried to log in before configuring the hack.

[hambil]

Very odd. The hack is only called when the system is about to display an access denied message.

[pugmy]

Accessing index.php somehow checked your code. I got the error even after I deactivated the hack from "vbAccessDenied Settings" page. So i had to disable the product temporarily until I find a solution.

[alluidh]

Hi Hambil
Is it OK to translate your powerful modification into german and gave the phrases to the members on vbhacks-germany.com?

[hambil]

Accessing index.php somehow checked your code. I got the error even after I deactivated the hack from "vbAccessDenied Settings" page. So i had to disable the product temporarily until I find a solution.
Okay, I made a change that should fix it - download the new zip and reinstall. Perhaps it will now uncover the real error :)

[hambil]

Hi Hambil
Is it OK to translate your powerful modification into german and gave the phrases to the members on vbhacks-germany.com? I'd be honored. Thank you :)

[alluidh]

I had to thank you

[pugmy]

i forgot to mention but unregistered users can't view my forum. perhaps thats the cause of it?

edit: oh awesome. ill try it right away.

[hambil]

i forgot to mention but unregistered users can't view my forum. perhaps thats the cause of it?

edit: oh awesome. ill try it right away.
Could be. Very interesting.

[pugmy]

This time, it properly inserted the forumid, but still ive got the sql error.

Invalid SQL:

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid = 0
AND (script = 'index(*)' OR script = '*' OR script = 'index(*)';

MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server
version for the right syntax to use near '' at line 4


hmm weird.

[hambil]

Hey! That's the sql bug I fixed in version 1.1. How did that creep back in? Dang - sorry folks. I've updated the zip again. Try now.

[pugmy]

the sql error disappeared when i created a vbaccessdenied page for unregistered users accessing index.php. however, this makes it unable for them to login in the first place.

edit. okidoki. thanks for the quick response.

[pugmy]

It seems it's working great now.
Thanks for the quick fix!

[hambil]

It seems it's working great now.
Thanks for the quick fix!
You're welcome. Now how about that install button... ;)

[pugmy]

installed :)

[Tyegurl]

okay so how do i choose more than one forum to deeny for one group?

[hambil]

okay so how do i choose more than one forum to deeny for one group?
You can duplicate the message, or use the * option for the forum - or set it up for a top level forum and it will also affect all the subforums because of how vBulletin works.

If people find they need a more powerful "multi-list box" kind of selection for forums and/or usergoups then I may consider adding that.

[Tyegurl]

okay so there's no way to just hold ctrl and click.....that would be nice....have a mass denial for certain forums....can you do that?

[hambil]

okay so there's no way to just hold ctrl and click.....that would be nice....have a mass denial for certain forums....can you do that?
Well, I'm not sure it's needed. Consider this: It only customizes the already existing "access denied" message. So - if you have 10 forums, and you have a usergroup that only has access to three of those forums, and you create a vbAccessDenied message with that usergroup name, and * for the forum, it will display whenever they try to access any of the seven forums they don't have access too.

vBulletin's usergroup, forum and promotion system is already very powerful - this hack builds on that, rather than replaces it.

[Tyegurl]

okay so i get it lol * goes in the forum....duh see i am a little thick....wasn't quite understanding....

so you can make one denial for a group for all the forums vb has denied them.

or a denial for a forum for all groups?

[Tyegurl]

well now i get a db error when i am unregisterd trying to access a page i shouldn't. i don't get a message about denial.

what have i done wrong?

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid =
AND (script = 'arcade(*)' OR script = '*');

MySQL Error : You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND (script = 'arcade(*)' OR script = '*')' at line 4
Error Number : 1064
Date : Thursday, March 30th 2006 @ 12:32:57 AM
Script : http://www.teamrespawn.com/vBulletin/arcade.php
Referrer : http://www.teamrespawn.com/vBulletin/forum.php

[hambil]

so you can make one denial for a group for all the forums vb has denied them.
Yup! :)

or a denial for a forum for all groups?
For all groups who vb has denied that forum, anyway.

Also, the messages are handled from specific to generic. So, if you have a group with a * for forum, and then you have the same group with a specific forum and a different message, they'll get the specific message for that forum, but the general one for all others.

The order is:
Specific message
General Usergroup Message
General Forum Message

[hambil]

well now i get a db error when i am unregisterd trying to access a page i shouldn't. i don't get a message about denial.

what have i done wrong?

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid =
AND (script = 'arcade(*)' OR script = '*');

MySQL Error : You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND (script = 'arcade(*)' OR script = '*')' at line 4
Error Number : 1064
Date : Thursday, March 30th 2006 @ 12:32:57 AM
Script : http://www.teamrespawn.com/vBulletin/arcade.php
Referrer : http://www.teamrespawn.com/vBulletin/forum.php
This should be fixed if you download the latest zip file.

[Tyegurl]

if its the one i downloaded tonight from the top of the page then yes.

nm i uploaded the wrong one dammit....i will fix thanks!

[hambil]

LOL - I do that all the time. It's hard to keep track sometimes :)

[Tyegurl]

one last thing.... how do i get it to automatically add the forum title and user's name? i am not too quick on this stuff

and yes with the correct version i got the message. sorry about that.

[hambil]

one last thing.... how do i get it to automatically add the forum title and user's name? i am not too quick on this stuff

and yes with the correct version i got the message. sorry about that.

One of the screen shots has some nice examples. Basically, any forum or user or usergroup data can be used. You put them in {} in the message.

Username would be {user.username}
and the forum would be {forum.title}

I'll put up a complete list of the standard vb ones tomorrow - but if you have installed hacks that add to the forum or user or usergroup table, you can also use those values too.

[Delphiprogrammi]

hi,

this doesn't work and throws an error every time you hit "messages" in the admincp navigation



Invalid SQL:

SELECT accessdenied_message.*, usergroup.title AS usergroup, forum.title AS forum
FROM vb3_accessdenied_message
LEFT JOIN vb3_usergroup ON usergroup.usergroupid = accessdenied_message.usergroupid
LEFT JOIN vb3_forum ON forum.forumid = accessdenied_message.forumid;

MySQL Error : Unknown table 'accessdenied_message'
Error Number : 1051
Date : Thursday, March 30th 2006 @ 07:00:54 AM
Script : http://*******/testvb/admincp/accessdenied.php?do=modify
Referrer : http://*******/testvb/admincp/index.php?do=nav
IP Address : ******
Username : ******
Classname : vb_database

[hambil]

hi,

this doesn't work and throws an error every time you hit "messages" in the admincp navigation
Unknown table means it didn't install properly for some reason. I have no idea why. What version is your MySQL?

[Delphiprogrammi]

Unknown table means it didn't install properly for some reason. I have no idea why. What version is your MySQL?

MySQL 4.1.14-standard

[hambil]

Can you remove the line $db->hide_errors() from the product xml and try importing it again? Tell me what, if any error you see?

[Delphiprogrammi]

Can you remove the line $db->hide_errors() from the product xml and try importing it again? Tell me what, if any error you see?

verry strange here is no error message ......


$msgs = $db->query_read("
SELECT accessdenied_message.*, usergroup.title AS usergroup, forum.title AS forum
FROM " . TABLE_PREFIX . "accessdenied_message
LEFT JOIN " . TABLE_PREFIX . "usergroup ON usergroup.usergroupid = accessdenied_message.usergroupid
LEFT JOIN " . TABLE_PREFIX . "forum ON forum.forumid = accessdenied_message.forumid
");


that is causing the error i have no field called "accessdenied_message" within the table vb3_accessdenied_message that field is for some reason missing

[hambil]

verry strange here is no error message ......


$msgs = $db->query_read("
SELECT accessdenied_message.*, usergroup.title AS usergroup, forum.title AS forum
FROM " . TABLE_PREFIX . "accessdenied_message
LEFT JOIN " . TABLE_PREFIX . "usergroup ON usergroup.usergroupid = accessdenied_message.usergroupid
LEFT JOIN " . TABLE_PREFIX . "forum ON forum.forumid = accessdenied_message.forumid
");

that is causing the error i have no field called "accessdenied_message" within the table vb3_accessdenied_message that field is for some reason missing
There is no field call accessdenied_message - it's the table name.

[hambil]

Ah...
I may see the problem - though why it hasn't caused anyone else trouble I don't know. Let me try a quick fix.

[hambil]

verry strange here is no error message ......


$msgs = $db->query_read("
SELECT accessdenied_message.*, usergroup.title AS usergroup, forum.title AS forum
FROM " . TABLE_PREFIX . "accessdenied_message
LEFT JOIN " . TABLE_PREFIX . "usergroup ON usergroup.usergroupid = accessdenied_message.usergroupid
LEFT JOIN " . TABLE_PREFIX . "forum ON forum.forumid = accessdenied_message.forumid
");

that is causing the error i have no field called "accessdenied_message" within the table vb3_accessdenied_message that field is for some reason missing
Okay, download the zip and try again.

[Delphiprogrammi]

Okay, download the zip and try again.

yeah working now thanks for fixing that do you mind telling me what the problem whas ?

[GamerzWorld]

Thanks to Gamerz I've realized that vbAccessDenied needs integration with vBulletin's group functions. I'll add this. I also plan on adding a new {matchlist} subsitution variable, that will list all users with matching ips to the one requesting access. Should be done by the weekend :)

Looking forward to this. My main concern was that I had no control over who could and who couldnt see the private forum, and therefore couldnt remove them. By intergrating the systems it

(a) Improved the current system massivley, as users are having problems finding where to apply
(b) Improves the use of your hack to automatically request

All it would need then is a link to registration as discussed :knockedout:

[hambil]

yeah working now thanks for fixing that do you mind telling me what the problem whas ?
The query was broken if you had a table prefix. You must have been the first to install it who has a table prefix :)

[scottct1]

Ok here is what I am trying to do.

I have a special forum on my site for supporters who donate.

At the moment if your not a donating member you can see the forum and if you click on the forum you are taken to it but are told that no posts have been made over the past 30 days.

What I would like it to do is when someone clicks on that forum they see a custom error message which asks them to consinder donating to get access to that forum.

Can that be done?

Thanks!

[hambil]

Well, you can only customize existing vbulletin access denied messages. The closest you can get is to make the forum so they can view it, but view nothing else (can't view thread contents or create new threads, etc.). Then use this tool to create a custom message for that forum and usergroup(s).

This to me actually seems like a better solution anyway, because the non-donating members are teased with the thread titles, and more encouraged to donate when they try to read and thread and get the message.

[scottct1]

Excellent, I think that will work. :D

Thank you!

[scottct1]

I would love to see this support formatted messages and possible vbcode.

I just typed up a nice message and its all squished together in one paragraph.

The origional looked like this...

You have tried to access the Private Supporting Members Pub and Grill Forum.

This is a special private forum made only available to those who financially support SatelliteGuys.US. (i.e. help us pay our bills)

Access to this special private forum can be yours for only $19.99 a year and besides giving you access to our very active Pub Member Forums you also get...

* Elimination of over 90% of the ads! (You will only see the top banner ad and the Gold Sponsors)
* A larger Private Message box, store 1000 Private Messages instead of only 25!
* The ability to store 300 pages (Using the SatelliteGuys Pager)instead of only 10!
* The ability to have your own ANIMATED Avatar!
* Ability for you to post FOR SALE items in our Classifieds Section!
* Access to our Private Back Room Forum - An optional forum where adults can hang out and discuss adult topics.
* A special icon next to your username in all your posts which tells everyone your a supporter!
* The good feeling that you help one of America's Most Popular Satellite sites stay online!

AND MORE!

And if you hurry now you will pay only $19.99 for a 1 years membership as the price will be going up to $24.95 on May 15th 2006!

To become a SatelliteGuys Supporter TODAY please visit http://www.satelliteguys.us/payments.php

If you pay by Credit Card you get all the benefits of your pub membership INSTANTLY!

Thank you for your support and for helping us keep the lights on!

However when it prints out it looks like this...

You have tried to access the Private Supporting Members Pub and Grill Forum. This is a special private forum made only available to those who financially support SatelliteGuys.US. (i.e. help us pay our bills) Access to this special private forum can be yours for only $19.99 a year and besides giving you access to our very active Pub Member Forums you also get... * Elimination of over 90% of the ads! (You will only see the top banner ad and the Gold Sponsors) * A larger Private Message box, store 1000 Private Messages instead of only 25! * The ability to store 300 pages (Using the SatelliteGuys Pager)instead of only 10! * The ability to have your own ANIMATED Avatar! * Ability for you to post FOR SALE items in our Classifieds Section! * Access to our Private Back Room Forum - An optional forum where adults can hang out and discuss adult topics. * A special icon next to your username in all your posts which tells everyone your a supporter! * The good feeling that you help one of America's Most Popular Satellite sites stay online! AND MORE! And if you hurry now you will pay only $19.99 for a 1 years membership as the price will be going up to $24.95 on May 15th 2006! To become a SatelliteGuys Supporter TODAY please visit http://www.satelliteguys.us/payments.php If you pay by Credit Card you get all the benefits of your pub membership INSTANTLY! Thank you for your support and for helping us keep the lights on!

Other then that working good!

Thanks!

[hambil]

It supports bbcode. See the attachment above: https://vborg.vbsupport.ru/attachment.php?attachmentid=44894&d=1143606717

I plan to use the WYSIWYG editor in the next version, but as you can see I've created a formated message. Can you give me some before and after screen shots?

[hambil]

Try creating the message using the WYSIWYG editor, when switching to the standard editor (button in the top right of the editor will do that). Then copy and pasting the message into vbAccessDenied. That should work.

This is why I will be directly supporting the WYSIWYG editor in the next version :)

[scottct1]

Here is what I am seeing...

The before is in the admin panel using the big editor.

The after is the message folks are actually seeing...

Thanks for your help!

[scottct1]

Try creating the message using the WYSIWYG editor, when switching to the standard editor (button in the top right of the editor will do that). Then copy and pasting the message into vbAccessDenied. That should work.

Tried that, no go, the BB Code displays correctly in the admin control panel (see picture 1)

However when the message is displayed to the user its all garbled up as seen in the second picture.

Thanks again!

[scottct1]

Ok I got it...

I had to use HTML instead of BBcodes and it all worked fine. The error messages now properly display. :)

Thanks again!

[hambil]

Ok I got it...

I had to use HTML instead of BBcodes and it all worked fine. The error messages now properly display. :)

Thanks again!
The bbcode parser somehow didn't make it into the product file. Ack! I've updated the product file, and doing an install with allow overwrite should enable bbcode with no harm done. Though you may need to change the html back to bbcode afterwards, I'm not sure.

[Xplorer4x4]

Database error in vBulletin 3.5.4:

Invalid SQL:

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid =
AND (script = 'private(*)' OR script = '*');

MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND (script = 'private(*)' OR script = '*')' at line 4
Error Number : 1064
Date : Friday, April 7th 2006 @ 10:05:28 AM
Script : http://www.domsforums.net/private.php
Referrer :
IP Address :
Username : Unregistered
Classname : vb_database
I got this trying to send a PM as a user waiting email conformation. It says unregistered but I was infact registered.

[hambil]

Database error in vBulletin 3.5.4:

Invalid SQL:

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid =
AND (script = 'private(*)' OR script = '*');

MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND (script = 'private(*)' OR script = '*')' at line 4
Error Number : 1064
Date : Friday, April 7th 2006 @ 10:05:28 AM
Script : http://www.domsforums.net/private.php
Referrer :
IP Address :
Username : Unregistered
Classname : vb_database I got this trying to send a PM as a user waiting email conformation. It says unregistered but I was infact registered.
Make sure you'd downloaded and installed the lastest zip. This problem was fixed a while back.

[hambil]

I'm taking this off Beta. It hasn't had any complaints or bugs in a while ;)

[computer1]

I have install this nowe and markt the forum movies to the moderator group
but when I login to the forum whit normal user I can se and write to that section movies howe can I fix this??.

Can I use admin group I cant finde that groupe ???
here is the link to that section
http://forum.wrestlingsidan.se/showthread.php?p=644#post644

I dont nowe where is the wrong whit this

[hambil]

I have install this nowe and markt the forum movies to the moderator group
but when I login to the forum whit normal user I can se and write to that section movies
You mark it to the group you want to get the message. So, if you want normal users to get the message then deny them posting access to the forum (in forum settings) and then mark the access denied message as "movies" forum and "normal" usersgroup (whatever your normal usergroup and movies forum is called).

[MissKalunji]

is it possible to use that to block access to example download section? its not in a forum but its apart of vb?

[hambil]

is it possible to use that to block access to example download section? its not in a forum but its apart of vb?
You can't block anything with this. All it does is allow you to customize the generic vBulletin access denied message for things you can already block.

So, if downloads generate a generic access denied message (I'd have to check) then you can customize it.

[MissKalunji]

Nah it doesnt but thanks!

[kurtbarker]

hey mate, what an awesome addition...

looks very easy to use

can this be used to display error messages for php extensions. like the arcade [arcade.php], and other modifications, rather than just error messages for forum access?

EDIT: I just read the above message... Things like the arcade have a 'usergroup permission', but this displayed the "You do not have permission to view this page', can that be customised for the different modifications?

[hambil]

hey mate, what an awesome addition...

looks very easy to use

can this be used to display error messages for php extensions. like the arcade [arcade.php], and other modifications, rather than just error messages for forum access?
It can be used for anything that generates a generic access denied message - and that is much more than just forums access. Calendar access, member list, attachments, etc. etc.

It cannot be used for third party hacks, because it does not include them in the list of things that generate those messages. However, that is an interesting idea. I will look into that.

Edit:
BTW, You'll see that there is a pulldown for "Script & Action" for advance users only. It will give you an idea of all the things that generate the generic access denied message.

[kurtbarker]

sounds interesting

*will install after typing this message ;)

and if you could look into support for thrid party hacks, then "woohoo"

thanks

[MissKalunji]

same here gon try that as well

[MissKalunji]

Thats what i've been looking for for paid subscription but im looking for aswell the Link and Dwonload script

I dont want certain usergroup to even see the page

[MissKalunji]

actually its not working

[hambil]

actually its not working
What exactly are you trying to do?

[MissKalunji]

i wanna block access to the newbie aka Member in trainning to the Subscription

[hambil]

Well, if you don't want the forums to show at all you don't need this hack for that. However, if you want to have the forums visible, but give them a detailed access denied message when the new user tries to post this is the hack for you.

On my board all new members are restricted to a handful of forums. When they try to post in a forum they can see, but not post in, the access denied message is intercepted by this hack, and they are given the message I've attached a screen shot of.

A pm is then sent to all admins. When an admin clicks on the approve link in the pm another pm is sent to the user letting them know they are approved, and all the other admins are cc'd on it.

It works very well for us.

[MissKalunji]

Ok then thanks

[MissKalunji]

Im trying to uninstall and when an unregistered user tries to see an error page this comes up :


Invalid SQL:

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid = 0
AND (script = 'member(*)' OR script = '*');

MySQL Error : Table 'danceha_forums.accessdenied_message' doesn't exist
Error Number : 1146
Date : Monday, May 15th 2006 @ 10:00:21 PM
Script : http://profile.dancehallareaz.com/member.php?action=getinfo&u=3894
Referrer :
IP Address : 66.249.65.197
Username : Unregistered
Classname : vb_database

[hambil]

Im trying to uninstall and when an unregistered user tries to see an error page this comes up :


Invalid SQL:

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid = 0
AND (script = 'member(*)' OR script = '*');

MySQL Error : Table 'danceha_forums.accessdenied_message' doesn't exist
Error Number : 1146
Date : Monday, May 15th 2006 @ 10:00:21 PM
Script : http://profile.dancehallareaz.com/member.php?action=getinfo&u=3894
Referrer :
IP Address : 66.249.65.197
Username : Unregistered
Classname : vb_database
For some reason it didn't uninstall completely. It looks like a plug in is still active. Once you've used the uninstall in products, check for any plugins that are still there and delete them if necessary.

[MissKalunji]

No everything is uninstall

I checked and double check nothing

[MissKalunji]

When i disable is fine as soon as i uninstall error

[hambil]

The code in that error exists inside a plugin. How it could hang around after being uninstalled baffles me.

[MissKalunji]

humph fine. I'll get someone to fix it for me then
Thx

[hambil]

humph fine. I'll get someone to fix it for me then
Thx
I'm happy to take a look at it on your site. I just don't know how it is happening is all.

[Stop]

O God. I've been waiting for this powerful hack days and nights. Thanks in advanced.
Let me give it a try.

[Stop]

Sorry
I did every thing as you said but I still can't see where is it?
how can I get to the Acess Denied Messge Manger.
I didnt find it in vBulltion Options. ONLY vbAccessDenied Settings where you can turn it on or off.

[hambil]

Sorry
I did every thing as you said but I still can't see where is it?
how can I get to the Acess Denied Messge Manger.
I didnt find it in vBulltion Options. ONLY vbAccessDenied Settings where you can turn it on or off.
It should be a menu choice on the left menu in the admincp. If it's not there make sure you uploaded the xml file under includes/xml, and try re-importing with overwrite.

[Stop]

yah found it after the re-import.
Thanks a lot.

[Stop]

HI again. It works very fine now but there's just a little thing.
vBulletin Messege is not showing. Attachment better explains.
Any idea ?

[hambil]

The board doesn't show for access denied messages. This is true with or without my hack. It's working as it is designed. Can you give me an idea of what you would like it to do instead?

[Stop]

ammm,
can you add a phrase to be showed on the top-left-side to say what this message is, like , The English Club Message ?

edit:
forgot to comment on this,
The board doesn't show for access denied messages. This is true with or without my hack. It's working as it is designed.

I think it does if you mean this.

[SaN-DeeP]

thanks for release.

[hambil]

ammm,
can you add a phrase to be showed on the top-left-side to say what this message is, like , The English Club Message ?

The messages are fully bbcode and html enabled. In theory you can make them look anyway you want.


I think it does if you mean this.

I'm a little confused. I went to your site and it seemed to work as I expected, although the navbar was missing. Your site is heavily skinned, so it's hard for me to know exactly what is going on, and what you expect or want to see.

[kurtbarker]

It cannot be used for third party hacks, because it does not include them in the list of things that generate those messages. However, that is an interesting idea. I will look into that.

any word on this mate?

[hambil]

any word on this mate?
I will have a new release out this weekened :)

[kurtbarker]

i'll keep my eye out for it... thanks

[Ambie]

This is nice. :) Thank you! One problem though. When I get the pm, and go to click on the approve link, I am getting this message.

This action can only be done through a vbAccessDenied approval pm.

[hambil]

It's a security feature. There are two ways to get that message. 1) No pm was sent (or it didnt' get recorded in the database for some reason). 2) The person clicking the approve link is not one of the people the pm was sent too.

[kafi]

hambil thank you for this fantastic hack, I always had problems with generic alerts...

One suggestion though .-) I have pretty much sub-forums and would like to have inheriting message function (according to my testing id doesnt work). I mean that sub-forum will inherit the message from parent forum (if I tick it on) - the same way it inherit permissions...

Is this something possible/interesting for you to do? Please let me know, if not I will do this manually for all my forums (I have about 100 subforums - about third of them permissioned).

Installed - great hack .-)

[hambil]

hambil thank you for this fantastic hack, I always had problems with generic alerts...

One suggestion though .-) I have pretty much sub-forums and would like to have inheriting message function (according to my testing id doesnt work). I mean that sub-forum will inherit the message from parent forum (if I tick it on) - the same way it inherit permissions...

Is this something possible/interesting for you to do? Please let me know, if not I will do this manually for all my forums (I have about 100 subforums - about third of them permissioned).

Installed - great hack .-)
That's interesting. And I think it's probably pretty easily doable. I'll add it into the 3.6 update this week.

[kafi]

Great news hambil, you made me happy today :-)

I found that it might be even more handy to have inheritions if it come to use also your per-script function within settings.

[kafi]

humbil, if you want to add PM title to phrases it will be great: $pmdm->set('title', 'vbAccessDenied PM from ' . $vbulletin->userinfo['username']);
I have translated for myself in plugin.

[kafi]

hambil me again :-)

I am not sure that I understand the flow of the PM.

PM is sent automatically although I do not know wheter the user will want to join the usergroup or not and therefor I do not know wheter to approve him.

My model situation:
I have an article forum where shouldnt be posted any questions or so - just articles. I have set up alert-message saying that he has not right to post in article forum and asking him wheter he is serious about adding new article or not...
1. Lets say he is not and I am getting request PM from him to join automatically ( I do not know wheter he is serious or not) ...yes I can disable PM, but I like the automated PM-request and therefor I would add sort of confirmation of the request from the users side (either link in PM sended to user asking him wheter he is serious about adding new article and want to join author group, or maybe direct link in alert-message where he may apply to join author group).

hmm is it possible/interesting for you to do? I have disabled currently autoPM request for the time being.

[hambil]

Yeah, I'm not sure I fully understand. Making the pm title so it is configurable is no problem, and a good idea. The other part you talk about I'll need to understand better...

[kafi]

sorry sometimes I am lost in expressing things in englis :-)))

Current situation:
- if I want to automate process of approving user for usergroup I tick "Send PM" and this PM with "Approve" link is send whenever any user try to post in forum that he doesnt have a permission for it.
- this PM is sent on users behlaf [I find this part a problem, because I do not know wheter user who attempted to post in certain forum is really interested in posting in this certain forum (what mostly happen is that some newbies push "new thread" button wherever they happen to be)]

Desired situation:
- I suggest not to send PM on users behalf to admin but rather send automated PM to user asking him "Are you interested in posting in XY forum and become member of XY usergroup?" In this very same PM he will have a link like "I want to join" and once he click the link admin gets application PM with "Aprove" link.
----------------------------------------

Model situation:
I have a forum with articles/tutorials. Lot's of newbies are posting here because they happen to read tutorial and they start new thread with questions. Then I need to moderate this forum. I would rather use permission base system with your customized annoncement saying that "This forum is dedicated to tutorials. If you are interested in posting tutorials, PM was sent to you with application link to join our tutorial authors usergroup. If you are not interested in posting tutorial, please ignore PM and find appropriate forum to post your thread".
------------------

hope it is a bit better now ? ;-)

[hambil]

Yes. An interesting idea, and I think I can add that :)

[parabat]

Hambil

You porting this too 3.6.4??
Can I use this to only report those users that try accessing closed ares, without telling them the mods have been notified?

-Parabat

[gunitman247]

can this work custom profile fields?

[hambil]

This hack is no longer supported and will not be ported to 3.6 by me. It is open for anyone to take ownership of, as long as you have at least one released hack so it's clear you can code :) Just PM me.

[EnIgMa1234]

I have taken over this hack now. I will be working on a port for 3.6 soon

[hambil]

Once EnIgMa1234 has done a port and established his own mod thread, this thread will likely be deleted. It would be nice to keep the history, but it doesn't look like that is possible currently. Thanks EnIgMa, and best of luck :)