View Full Version : Miscellaneous Hacks - Cyb - Advanced Forum Rules
SamirDarji
11-17-2009, 05:12 AM
i uninstalled this but the templates still show under custom templates, how do i remove those templates ?
thanks :)To get rid of a custom template, click on the template and then the revert button. :)
GeorgeB85
11-17-2009, 10:26 PM
was seeing when this might be upgraded to 4.0?
bluej
11-18-2009, 07:42 AM
To get rid of a custom template, click on the template and then the revert button. :)
wow, thanks so much, so simple too :o
SamirDarji
11-18-2009, 01:39 PM
wow, thanks so much, so simple too :oWelcome!
FearlessWeeder
11-30-2009, 03:35 PM
This appears to be a fantastic add-on.
Perhaps I asked this question in the wrong forum.
https://vborg.vbsupport.ru/showthread.php?p=1920219#post1920219
Will this hack allow us to create an acknowledge and acceptance of terms of agreement specific to one forum before starting a thread for 3.8?
We have the standard click-through when first registering wherein which guests agree to our TOS or they aren't able to register. We don't have anything for an individual forum.
It is my understanding Cyb Adv Forum Rules is capable of doing what we want. We would like to create a click through for one forum only that members starting new threads would have to acknowledge and accept before being allowed to create their new thread. We are not looking for a force read. We could use a click-through not all that dissimilar from the click-through required at time of registration.
Will this hack do that and if so how we would go about doing it? Any guidance would be very much appreciated.
Alfa1
12-03-2009, 08:35 PM
When a user joins a social group it can be handy to have the user agree to the rules or guidelines of the group. This will make sure that the user understands the purpose and rules of the group.
Please add a function to show rules to new social group members when they join.
FearlessWeeder
12-06-2009, 03:44 PM
Unfortunately, members from any group may submit articles to this one particular forum and we do need an automated way to inform them of the rules prior to submitting an article.
The forum we have created is not all that dissimilar to the forum here at vB.org under the tab articles. Any member can submit an article. We don't know who will be submitting one until it appears. We are not in a position to intercept these members trying to contribute content by asking them to join a social group.
There really must be a way to create a click through for one specific forum. vB provided one for all those registering.
yahooooh
12-17-2009, 05:27 AM
any update or new relase for blog roles
Will this work on a 3.8.4?
Trumpetrhapsody
12-29-2009, 04:13 AM
Any plans for vb4?
grahamsmythe
12-29-2009, 11:50 PM
Any plans for vb4?
Yeah, I'd love to use this with vBulletin v4.0 as well!!!
josantos
01-03-2010, 01:52 PM
Yeah, I'd love to use this with vBulletin v4.0 as well!!!
Yes, that would be cool !!! :up::up:
Bergler
01-03-2010, 03:33 PM
Yes, Cybernetec (https://vborg.vbsupport.ru/member.php?u=108756) has some great mods and I used many of them on 3.8. I sure hope they are converted to 4.0 :up:
morrow
01-04-2010, 01:50 AM
This is working great for me now!!! 3.8.4. Thank You!
morrow
01-04-2010, 02:13 AM
Ok... I do have a question... How will this affect spiders from coming onto my site? If I enter the site as a guest, I have to wait 30 seconds (or whatever time I set) before I can view anything.
DaPro
01-04-2010, 06:07 PM
Is this being ported over to 4.0?
JoeLouie
01-09-2010, 09:58 PM
Fixed bug: 'Reset user acceptance status when infraction received' does not work properly
It isn't working for me on 3.8.4. Any suggestions?
lycheepassion
01-12-2010, 04:42 AM
<font color="Indigo">Ok I cant seem to add the link to the navbar in my new theme, wha hapens is it goes to the old one when the link is clicked and I cant postn it in the navbar right I dont see the faq part to put it in after. Thanks</font>
meschiash
01-17-2010, 07:41 AM
I wait too for CFRULES for vB4.x.x ! :D
RedFoxy
01-29-2010, 12:22 AM
me too, it's too important!
Just some suggest for new version: a way to link directly to a specific rule (I've more than one) without using menu
speedway
01-30-2010, 12:19 AM
Just upgraded to 3.84PL2 and the Accept button has disappeared upon upgrade to CYB rules 4.02.
As I get around 20 - 30 new members per day I would very much appreciate someone suggesting where I should be looking as our rules are needed. Barring that, how do I keep the rules active WITHOUT forcing acceptance? That would do until I can sure the no button problem....
Cheers
speedway
Neptun
01-31-2010, 11:47 AM
i wait for the vb4 ported relase ... this is a great mod - the other hacks at the moment for vb4 you can forget definitly
dacho
02-02-2010, 07:28 AM
i wait for the vb4 ported relase ... this is a great mod - the other hacks at the moment for vb4 you can forget definitly
Me also :)
It would be nice if will be thinking about SEO, and Google could gain automatic approval rules to scan the contentst
solarweb
02-07-2010, 06:14 AM
I´m waiting for the v4.0 compatible version too. Maybe the more useful mod i´ve ever seen.
DaPro
02-14-2010, 03:48 PM
Hey Valter, I see you have upgraded your other mods, will this one be coming over as well bud?
inciarco
02-14-2010, 05:31 PM
To Include the Accepted Rules on the Profile Statistics, (would be a nice addition on your next Update Cybernetec;)):
Create a Plugin:
Product: vBulletin (I select this so that on an Update the Plugin don't get Deleted)
Hook Location: member_profileblock_fetch_unwrapped
Title/Name: Cyb - Advanced Forum Rules - MI - Accepted Rules in Profile Profile Statistics (or the name you want)
Execution Order: 5
Plugin Active: Yes
Note to the PHP Code: (Choose the Usergroups you don't want the Accepted Rules to be Diplayed to, currently '1,8', simply separate them with commas)
PHP Code:
if (!is_member_of($vbulletin->userinfo, explode(',','1,8')))
{
$cyb_frules_readsets_2 = $userinfo['cybfrules_sets'];
if ($userinfo['cybfrules_sets']!='0')
{
$cybfr_getrulesets_2 = $vbulletin->db->query_read("
SELECT id, name
FROM " . TABLE_PREFIX . "cyb_frules AS cyb_frules
WHERE id IN ($cyb_frules_readsets_2)
ORDER BY id ASC
");
while ($cybfr_ruleset_2 = $this->registry->db->fetch_array($cybfr_getrulesets_2))
{
$cyb_frules_readitem_2 .= "<tr><td class=\"statistics_group\"><b>".$cybfr_ruleset_2['id'].":</b> ".$cybfr_ruleset_2['name']."</td></tr>";
}
$cyb_frules_force_2 = ' <fieldset class="statistics_group">
<legend>Accepted Rules</legend>
<span class="shade"><table cellpadding="0" cellspacing="0" border="0" width="100%">'.$cyb_frules_readitem_2.'</table></span>
</fieldset>';
eval('$template_hook[\'profile_stats_last\'] .= "$cyb_frules_force_2";');
}
}
Option 2:
If you want the Accepted Rules to be Displayed to All Usergroups, simply Choose the following code:
PHP Code:
$cyb_frules_readsets_2 = $userinfo['cybfrules_sets'];
if ($userinfo['cybfrules_sets']!='0')
{
$cybfr_getrulesets_2 = $vbulletin->db->query_read("
SELECT id, name
FROM " . TABLE_PREFIX . "cyb_frules AS cyb_frules
WHERE id IN ($cyb_frules_readsets_2)
ORDER BY id ASC
");
while ($cybfr_ruleset_2 = $this->registry->db->fetch_array($cybfr_getrulesets_2))
{
$cyb_frules_readitem_2 .= "<tr><td class=\"statistics_group\"><b>".$cybfr_ruleset_2['id'].":</b> ".$cybfr_ruleset_2['name']."</td></tr>";
}
$cyb_frules_force_2 = ' <fieldset class="statistics_group">
<legend>Accepted Rules</legend>
<span class="shade"><table cellpadding="0" cellspacing="0" border="0" width="100%">'.$cyb_frules_readitem_2.'</table></span>
</fieldset>';
eval('$template_hook[\'profile_stats_last\'] .= "$cyb_frules_force_2";');
}
My Best Regards.
:)
Yosef Sh
03-30-2010, 04:15 PM
I cant manage rules ..
when i enter Manage Rules or Apply to Forums i get smiles page
andie215
04-01-2010, 08:40 AM
Ive just installed it on 3.8.5 and i cant see how to unselect a forum that i selected earlier. There isnt a tick on the box where i have previously selected so how do i deselect please ?
Great mod thx..
Tettinntil
05-08-2010, 04:02 PM
The "Forum Rules" link appears twice in my navbar. Any quick fix for that?
Bounce
05-12-2010, 09:46 PM
i wait for the vb4 ported relase ... this is a great mod - the other hacks at the moment for vb4 you can forget definitly
I?m waiting for the v4.0 compatible version too. Maybe the more useful mod i?ve ever seen.
Hey Valter, I see you have upgraded your other mods, will this one be coming over as well bud?
hope so, same, waiting on vb4 release, defo up there with the best this one.
lucky51
05-15-2010, 11:49 AM
thanks for making this modification.
is there a way i can force users to accept these rules before every new thread or new reply ?
rizve69
05-30-2010, 10:40 AM
any chance for vB4?please.i like this one and need for my vb4.thanks
GeorgeB85
05-30-2010, 11:21 AM
any chance for vB4?please.i like this one and need for my vb4.thanks
Go to valters profile. It is called VSa-Advanced Forum Rules
wpeloquin
06-04-2010, 03:10 PM
vB4 release: https://vborg.vbsupport.ru/showthread.php?t=236069
matthewhotdude
06-06-2010, 02:11 PM
any chance for vB4?please.i like this one and need for my vb4.thanks
https://vborg.vbsupport.ru/showthread.php?t=228755
imedic
07-23-2010, 09:05 AM
Please take attention that if you think all options from: Before Accepting Rules User Can Not... (mostly view forums and threads) then google boot is seeing for each thread the forum rules not the thread.
I dont know what is that but aparently I have change settings and marked view threads (or forums, I don't remember) too after a long time of using the product without problems and google stop indexing my pages as he was seeing only redirect screen to forum rules.
I have totaly crashed with google as it took me v long time to figure ( I used fetch as google boot from webmaster tools) that this was the cause.
I have now 370 links indexed out of 80.000! :(
I have unticked all boxes and all is working great. Checked with fetch as... also ...
I have no clue why is this happening but I am so bussy to find out, I am just happy to solve it. Wrote for reinclusion to google.
(I was also thinking it was the redirect hack widely spread lately, I could not confirm it as I have upgraded the forum first then I found about the hack).
PS. This is not intended to put the blame on coder (many thanks man for this wonderfull hack) but to avoid google problems. I might use it wrongly as I have remembered that forum rules where cookie based and was not showing for boots.
Alfa1
08-04-2010, 04:02 AM
Cyb: Some time ago you mentioned that you wanted to add rule sets for Social Groups. I am much in need of this and would like to know if you have it planned for an upcoming release. If not then I will have this function coded by someone. I dont mind paying for the function.
SnapOff Racing
12-14-2010, 09:55 PM
Please take attention that if you think all options from: Before Accepting Rules User Can Not... (mostly view forums and threads) then google boot is seeing for each thread the forum rules not the thread.
I dont know what is that but aparently I have change settings and marked view threads (or forums, I don't remember) too after a long time of using the product without problems and google stop indexing my pages as he was seeing only redirect screen to forum rules.
I have totaly crashed with google as it took me v long time to figure ( I used fetch as google boot from webmaster tools) that this was the cause.
I have now 370 links indexed out of 80.000! :(
I have unticked all boxes and all is working great. Checked with fetch as... also ...
I have no clue why is this happening but I am so bussy to find out, I am just happy to solve it. Wrote for reinclusion to google.
(I was also thinking it was the redirect hack widely spread lately, I could not confirm it as I have upgraded the forum first then I found about the hack).
PS. This is not intended to put the blame on coder (many thanks man for this wonderfull hack) but to avoid google problems. I might use it wrongly as I have remembered that forum rules where cookie based and was not showing for boots.
That only applies if you don't have your Unregistered / Not Logged In usergroup ID in the Usergroups excluded from restrictions box.
Fenriz
04-01-2011, 04:31 AM
I have one problem. During registration user accept a "General Rules", right? Especially, if you have an option "Registration Rules Options - Replace with General Forum Rules". Ok, but after registration user still have "Forum Rules NOT accepted" if profile and therefore must accept the General Rules once more. Is that a bug? How can I make accepting Registration Rules user accepted General Rules? Please please please answer asap ..
septimus
04-13-2011, 06:43 PM
Regarding the use of BB Code - for some reason it works fine in the first rule, but any additional rules after that are not parsed.
I searched this thread for BBCode and read post #1, but I cannot find anything about this.
Alfa1
05-04-2011, 12:27 PM
A large number of websites have been hacked today. Its possible that this was caused by an issue with this addon. It may be a good idea to deactivate the addon until this is cleared up.
http://www.vbulletin.com/forum/showthread.php/379072-Site-hacked-can-someone-please-help
Reviewed the code for Cyb - Advanced Forum Rules and this can be the culprit as I see an exploit there
SnapOff Racing
05-04-2011, 02:05 PM
Yup heard about this over at vB.com as well. I'm sure Valtar will get it handled but for now....
~UNINSTALLING~
ikorolis
05-04-2011, 09:04 PM
updated mod version 4.0.3 i hope is fine.
LauraM
05-04-2011, 09:19 PM
I've updated and all seems to be working as normal.
Alfa1
05-04-2011, 09:33 PM
This version includes a fix for the vulnerability.
Thanks Valter!
Andyrew
05-04-2011, 09:57 PM
This problem is not fixed, I have just been hacked after updating.
ikorolis
05-04-2011, 10:02 PM
maybe is not fault this mod but other mod for hack your site.
Alfa1
05-04-2011, 10:22 PM
This problem is not fixed, I have just been hacked after updating.
Did you install the product with overwrite?
caracena
05-04-2011, 10:42 PM
Hi guys,
I updated with overwrite and everything works fine except one little thing. When I'm viewing a set of rules and I use the dropdown to see other set of rules, it takes me to my home page instead of doing the collapse/exand thing. What should I do? uninstall/reinstall the mod having to configure it again? Or yiou guys know a fix?
Thanks in advance ;)
Andyrew
05-04-2011, 10:50 PM
Did you install the product with overwrite?
Yes
ikorolis
05-04-2011, 11:27 PM
from Cyb - Advanced Forum Rules
demo: http://www.bihforum.com/misc.php?do=cfrules
is HACKED by same team.
ikorolis
05-04-2011, 11:29 PM
i am unistalled this mod for moment and wait to real fixed.
ShawneyJ
05-05-2011, 04:08 AM
i am unistalled this mod for moment and wait to real fixed.
same, its confirmed by vbulletin that this was the cause of HEAPS of boards being hacked.
FreshFroot
05-05-2011, 06:49 AM
And no Sign of Valter LOL
HMBeaty
05-05-2011, 06:50 AM
And no Sign of Valter LOL
Pretty sure he sleeps and has a life too.....
tlwwolfseye
05-05-2011, 07:22 AM
I have that need to shoot someone right now...
Good to have such reliable mods that screw up everything. :(
Valter
05-05-2011, 08:45 AM
This has been fixed immediately but we must wait for Staff to check updates and revert product.
v4.0.3 - May 04. 2011.
-Security bug fixed
To update:
-Import XML, allow overwrite
Valter
05-05-2011, 08:56 AM
This problem is not fixed, I have just been hacked after updating.
Please check out this link:
http://www.vbulletin.com/forum/showthread.php/379072-Site-hacked-can-someone-please-help?p=2154415#post2154415
ikorolis
05-05-2011, 09:55 AM
Hey
one question have
the security bug/fault/exploit or sql injection have fixed or not?
have any danger of other CYB_ Hack Mod?
thank you.
If Valter doesn't mind, here's the product XML of what I'm using on my forum. I edited all plugins/templates, mostly to make sure that one, it was using proper escaping in queries, and two - made all url's/links use the session var.
Instead of using escape_string I have it using sql_prepare (which will escape_string if needed based on value, whether value is a string or integer).
It's based on 4.0.3, and has been running with no problems.
mechanist
05-05-2011, 10:39 AM
Can this be also used for 3.8.x and how can I update the current version to this one ?
Simple Overwrite ?
Thanks in advance.
cellarius
05-05-2011, 10:51 AM
Also, why also? This mod is for vB 3.8.x. How to update has been explained by valter like three or four posts before yours.
mechanist
05-05-2011, 11:03 AM
This is why "also":
By Eric:
It's based on 4.0.3, and has been running with no problems.
Meanwhile I`ve implemented Erics Modification to a copy of my board and it`s working.
Just wanted to be clear - I simply modified it a bit, I take no credit whatsoever for it, and I am just sharing it within this thread if others want to use it. This is Valter's modification/hack, I just updated it with a few changes.
LauraM
05-05-2011, 11:15 AM
If Valter doesn't mind, here's the product XML of what I'm using on my forum. I edited all plugins/templates, mostly to make sure that one, it was using proper escaping in queries, and two - made all url's/links use the session var.
Instead of using escape_string I have it using sql_prepare (which will escape_string if needed based on value, whether value is a string or integer).
It's based on 4.0.3, and has been running with no problems.
I am not very knowledgeable about these things.......could you explain exactly what I need to do to add this to my Cyb Forum Rules? :o
mechanist
05-05-2011, 11:16 AM
Thank you, Eric
@LauraM
Just install Eric`s Modifiaction but make sure that you allow to overwrite the previous version. That`s it.
LauraM
05-05-2011, 11:24 AM
Thank you, Eric
@LauraM
Just install Eric`s Modifiaction but make sure that you allow to overwrite the previous version. That`s it.
Thank you. :)
cellarius
05-05-2011, 12:19 PM
This is why "also":
By Eric:
It's based on 4.0.3, and has been running with no problems.
4.0.3 is the version of the mod, not the vB version... as in: mod version 4.0.3 for vB 3.8.x. :)
mechanist
05-05-2011, 12:24 PM
Ah, now that makes sense.
Thx !!!
Valter
05-05-2011, 02:06 PM
Hacked by Team Animus?
Please read this thread:
https://vborg.vbsupport.ru/showthread.php?t=263202
ShawneyJ
05-05-2011, 02:15 PM
Hacked by Team Animus?
Please read this thread:
https://vborg.vbsupport.ru/showthread.php?t=263202
you may have been the last to fix your site lol. blown over by now i hope. they all hit 24 hours ago. 10 hours of that was fixing all my forums because of your mod. i guess its install at own risk but still, should this hack be in the grave yard or will an update be released?
edit: opps sorry just sen the update, will wait for feed back thanks.
Valter
05-05-2011, 02:29 PM
Bug has been fixed yesterday.
21:55 CET - Bug reported
22:22 CET - Bug fixed
22:26 CET - Update posted
ikorolis
05-05-2011, 05:05 PM
i am waiting official answer this security bug/hack/exploit is fixed or not.
mod hacks is safe to use or not
cellarius
05-05-2011, 05:09 PM
Whom "official" do you expect to answer here?
ikorolis
05-05-2011, 05:13 PM
my question not answer here or vb.com
i know my friend
i know is big mistake give money to buy VB 3.x or VB 4.x and dont try other payment or open/free source software with good support.
cellarius
05-05-2011, 05:39 PM
You did not give money to anyone in order to use this mod, and vBS does not check or take responsibility for third party code, which is entirely normal. But this is a modification thread, so this is OT.
ikorolis
05-05-2011, 06:16 PM
my friend maybe dont understand me.
i give money to buy VB licence (software) 3.x Version and 4.x Version
i give money to buy DOMAIN NAME/HOST SERVICE
dont give any money this mod hacks or plugins (but support work this coders make this usefull plugins)
without this 3rd party plugins have one portal/site/forum/blog dont like to anyone.
all payment software for websites and all open source have plug ins and SAFE.
other coders/developers if know give good support
the vb.com i am sorry not have good support (except if pay this)
thats say big mistake give any money for VB.
next time to create website never using VB.
(sorry my english i am from greece)
Fenriz
05-05-2011, 06:57 PM
/misc.php?do=cfrules_mng gives me a blank page after upgraded to 4.0.3 from 4.0.2. Anyone has the same problem?
Valter
05-06-2011, 07:47 AM
v4.0.4 - May 06. 2011.
-Fixed: vbseo users not able to switch rules
To update:
-Import XML, allow overwrite
CMFINC
05-06-2011, 08:30 AM
thanks for the hard work making this program as well as working on it. I'm sure i will use it again as i did like it. but at this time I'm going to wait a bit see the ones with more time and knowledge on fixing forums use this . as i have been trying to clean up now for next to 2 days .. and thats my fault for just learning this stuff.. LOL.
ikorolis
05-06-2011, 11:58 AM
Valter is good and trusted coder and using many CYB_ mod hacks.
but this mod hack uninstalled from my site and maybe other mod hacks have uninstalled.
sorry nothing personal Valter but is too risk lost everything on my site/forum. (dont have much time to install and setup again)
sross
05-06-2011, 12:14 PM
These things happen and can strike any software at any time. This is why I keep 3 different backups of my forums.. one on disk, one on a different box at the host, and one that is rsync'd to my local machine at home (in a vm session which is then shut down after sync and also duplicated to a NAS). If you do not have a good backup system in place, then you're asking for it.
ikorolis
05-06-2011, 12:22 PM
BACKUP (many places is safe) is the first word to know anyone have job to IT Department.
dont worry my friend already using backup any day / any time (SQL DB / FILES DB) for many places on server and on my computer.
i am not trust any backup after hack attack (reason is the hacker have modify .php or .html files or templates or sql db or....and never see the "bad code")
i am say anyone hacked my VB 3.x force to deleted everything on my server and install / setup new VB 4.x without any mod/hack.
ShawneyJ
05-09-2011, 03:23 AM
v4.0.4 - May 06. 2011.
-Fixed: vbseo users not able to switch rules
To update:
-Import XML, allow overwrite
you sound sure of your self that you have fixed the security hole.
like hundreds of forums hacked must hurt in some way yeah?
anyway, im going to put this to the test and re-install and go live.
one thing is the demo link still is not live which makes it iffy :rolleyes:
cellarius
05-09-2011, 04:34 AM
like hundreds of forums hacked must hurt in some way yeah?
What kind of bull**** is this? What do you want to hear? Is he to confess and wear sackcloth and ashes? Would you prefer a pillory? He's offering free addons for vB, and security issues have known to be found in any kind of software. Nobody forces you to use it, but if you're unaware that installing addons carries a risk, since all humans are prone to errors, it's your own fault. He sure did not do it on purpose. But if this kind of sniping is good for your ego...
And yes, the security hole is fixed indeed.
ShawneyJ
05-09-2011, 10:16 PM
ok update, everything seems ok now for those that are to scared to re-install. been a night and half a day, all seems good. @cellarius, hey moron, i felt sorry for the guy. you need to think before talking out your rear end.
thanks Valter ;)
cellarius
05-10-2011, 04:41 AM
Then you should make yourself clearer. Even after reading your wording again, I just can't understand it in any other way that I did - moron yourself.
Yakuza
05-10-2011, 04:41 AM
After upgrading to 4.0.3 first and then 4.0.4 rules are not displayed, empty box at misc.php?do=cfrules
I wish i could download old versions, i was on 3.6, probably even not affected by the bug :/
Daverball
05-10-2011, 09:23 AM
After upgrading to 4.0.3 first and then 4.0.4 rules are not displayed, empty box at misc.php?do=cfrules
I wish i could download old versions, i was on 3.6, probably even not affected by the bug :/
Everybody was affected by the bug, there was some unescaped POST-Data, so SQL-Injection was possible independant of the vBulletin-version.
I have updated to 4.0.3 first and then 4.0.4, my rules are still intact. You know that you have to reactivate the plugin, right? Because as long as you haven't activated it, you can't look at your rules and will be forwarded to the smiley page.
ShawneyJ
05-10-2011, 02:31 PM
Then you should make yourself clearer. Even after reading your wording again, I just can't understand it in any other way that I did - moron yourself.
if ya got a problem pm me, if not zip it ;)
----------
anyway BACK on topic!
when you click last post icon on a forum, it re-directs to rules nicely, but once accepted and submit a message shows: No Thread specified. If you followed a valid link, please notify the administrator.
cheers. :up:
RedDog69
05-11-2011, 09:23 AM
There are still some bugs in this hack, i have jumped directly from 3.9.2 to v4.0.4 and i´m on vb 3.8.4 patch L 2.
Unique problem i have, that after forcing members to re read rules, he has no way of accepting them, he is directed to the rules page, but there is no button to agree with them ...
Any help would be appreciated, as is a great mod and addition to vbulletin
septimus
05-13-2011, 04:31 PM
After the exploit, there were some recommendations that said to completely uninstall vs. disable, and that is what I did. If I reinstall, will the members that previously accepted have to reaccept again? I'm hoping not.
My questions rarely get answered here in the forums, so I don't expect this time to be any different, but I'll ask anyway :p
My questions rarely get answered here in the forums, so I don't expect this time to be any different, but I'll ask anyway :p
Well, now I have to answer, even if I don't know for sure. :) But looking at the code I'd say yes, it seems to save the "accepted" state for a user in the user table, and it drops that column when it's uninstalled, so they'll probably have to accept again.
Personally, I'm waiting a little longer before reinstalling.
RedDog69
05-13-2011, 06:04 PM
After the exploit, there were some recommendations that said to completely uninstall vs. disable, and that is what I did. If I reinstall, will the members that previously accepted have to reaccept again? I'm hoping not.
My questions rarely get answered here in the forums, so I don't expect this time to be any different, but I'll ask anyway :p
Huh, i did un install it and it fudge up my custom styles ... and i like the hack so i?ll be still very happy if any one could help me with sorting my above problem
Thx in advance
RD
vijayninel
05-13-2011, 06:10 PM
Very interesting and useful mod. I will be installing this shortly. :)
Valter
05-17-2011, 09:43 PM
v4.0.5 - May 18. 2011.
-Fixed: Security bug
-Improved rule acceptance check
To upgrade:
Import XML, allow overwrite
dmark101
05-17-2011, 10:54 PM
updated. thanks. :)
andrew67
05-17-2011, 11:03 PM
Thanks for your swift responses to needed updates.
ShawneyJ
05-18-2011, 04:39 AM
v4.0.5 - May 18. 2011.
-Fixed: Security bug
-Improved rule acceptance check
To upgrade:
Import XML, allow overwrite
you are the man, thanks ;)
wait and see if this update fix problem as previouse didn't...
RedDog69
05-18-2011, 04:59 PM
Still same problem as before, user is not able to accept the rules ... Uninstalled :(
Sixpackmark
05-19-2011, 10:51 AM
Installed and updated, working and can accept the rules... Thanks Valter
FreshFroot
05-20-2011, 06:52 AM
Pretty sure he sleeps and has a life too.....
LOL.
Of course he does, but that doesn't mean he can't take 2 mins. To make a post to state that everyone using the hack could be hacked and should disable it. At least people could disable the hack quickly and save themselves from being hacked.
Anyways glad the problem has been fixed.
Truth be told I think many hacks here at vBorg are exploitable. But no one looks deeply into the code. And well the hackers out there do that since they have no life but to go around hacking boards.
AusPhotography
05-20-2011, 07:11 AM
Truth be told I think many hacks here at vBorg are exploitable. But no one looks deeply into the code. And well the hackers out there do that since they have no life but to go around hacking boards.
And possibly in vB itself. NO software is perfect.
I've reviewed all the plugins we use, and am happy were now ok. Not having a site tech and only relying on 3rd parties is not a good idea.
Kym
cellarius
05-20-2011, 09:14 AM
LOL.
Of course he does, but that doesn't mean he can't take 2 mins. To make a post to state that everyone using the hack could be hacked and should disable it. At least people could disable the hack quickly and save themselves from being hacked.
vb.org does that for him automatically once the addon goes into quarantine. A notification mail goes to everyone who has marked the addon as installed. They often end up in Spam Filters, though, as happened for me this time (just make sure you have your filters set up to let mails from vb.org through)
vb.org does that for him automatically once the addon goes into quarantine. A notification mail goes to everyone who has marked the addon as installed. They often end up in Spam Filters, though, as happened for me this time (just make sure you have your filters set up to let mails from vb.org through)
Went to my spam folder as well. I am geussing it is because of "quarantine" being in the message.
septimus
05-21-2011, 01:27 PM
Well, now I have to answer, even if I don't know for sure. :) But looking at the code I'd say yes, it seems to save the "accepted" state for a user in the user table, and it drops that column when it's uninstalled, so they'll probably have to accept again.
Personally, I'm waiting a little longer before reinstalling.
When I came back to thank you the mod had been quarantined and I couldn't reply. So thank you very much for answering my question.
I personally love the concept of this mod, but I think some jerks are going to continue to try to break it.
The main feature I liked about this mod was redirecting users who've received an infraction to the general rules page. I also liked being able to setup different rules.
We have general, marketplace, and developers. I ended up creating FAQ pages for each and then created a pulldown in my navbar to get to them. So the only feature I am missing out on is the redirect for infractions. Maybe I'll write my own plugin that does that someday.
I personally love the concept of this mod, but I think some jerks are going to continue to try to break it.
Yeah, that's the way it goes I guess. Thing is, I feel pretty confident now that it's OK. After the first problem the focus was on the SQL statements, and a non-SQL problem was missed. But after the second time I think all user input has been gone over by more than one developer, so I think it's probably safe now.
FreshFroot
05-24-2011, 03:34 AM
And possibly in vB itself. NO software is perfect.
I've reviewed all the plugins we use, and am happy were now ok. Not having a site tech and only relying on 3rd parties is not a good idea.
Kym
I never said scripts are perfect. I said they could've addressed it sooner. And for mods usually the script is NOT updated that fast compared to vB, which is fixed usually within a few hrs.
vb.org does that for him automatically once the addon goes into quarantine. A notification mail goes to everyone who has marked the addon as installed. They often end up in Spam Filters, though, as happened for me this time (just make sure you have your filters set up to let mails from vb.org through)
That may have happened, but I believe they quarantined the mod so late that many websites were already hacked at that point.
cellarius
05-24-2011, 04:44 AM
That may have happened, but I believe they quarantined the mod so late that many websites were already hacked at that point.
You expect them to quarantine the mod before they know about it? :confused:
FreshFroot
05-24-2011, 05:52 AM
You expect them to quarantine the mod before they know about it? :confused:
Well that is obvious.. he's not god and can't do that. But it seemed like members had posted about it and there was no response from Valter to confirm the problem.
My guess is he just went ahead to fix it instead of posting that he is looking at it and will address it.
Anyways I am not here to fight. So I am done with this discussion.
I posted my points and some people will agree and some won't and heck some might not get them. And that is all fine by me.
All the best to all the forums that were hacked and I hope they had backups to fix the major take downs.
FreshFroot
05-24-2011, 05:55 AM
When I came back to thank you the mod had been quarantined and I couldn't reply. So thank you very much for answering my question.
I personally love the concept of this mod, but I think some jerks are going to continue to try to break it.
The main feature I liked about this mod was redirecting users who've received an infraction to the general rules page. I also liked being able to setup different rules.
We have general, marketplace, and developers. I ended up creating FAQ pages for each and then created a pulldown in my navbar to get to them. So the only feature I am missing out on is the redirect for infractions. Maybe I'll write my own plugin that does that someday.
Ya jerks like that will exist sadly.. No matter what script someone will always try to break it for their own reasons.
I just hope the people that were affected are better now. I read someones post earlier stating they had no backups and the forum was pretty much destroyed. :(
Daverball
05-25-2011, 02:30 PM
Well if you don't backup you're pretty much asking for it, if you have the funds to buy vBulletin you should have the funds to make a daily backup of the forums, otherwise you will eventually regret it, it could've happened with any other mod or with vbulletin itself.
Slepur
06-03-2011, 08:51 AM
Just so you know, this version is still vulnerable, you might wish to check through the code again.
Daverball
06-03-2011, 09:12 AM
Just so you know, this version is still vulnerable, you might wish to check through the code again.
Then maybe you wish to inform Valter of the exact nature of the vulnerabilities in a private message, instead of just claiming that it is vulnerable.
Diggo11
06-21-2011, 07:59 AM
I believe a version of Internet Explorer has had this problem for a while, but now this mod doesn't seem to work for users with Chrome? (Tested Chrome 12.) When viewing a forum protected by a rules set, users are shown only the general forum rules (not the forum specific rule set) and hence when clicking accept are only looped back to the "You must accept the rules to proceed!" page...
EDIT: Okay, only seems to be affecting my latest forum. Use a set of rules I created yonks ago and it works perfectly in Chrome, use a set of rules I created ten minutes ago and nothing shows.
Paul M
06-21-2011, 10:56 AM
Just so you know, this version is still vulnerable, you might wish to check through the code again.
If you have information on an issue then use the report post facility to report it, with exact details. Posting cryptic messages like this helps no one. :cool:
LauraM
06-27-2011, 01:15 AM
So, is this safe to turn back on, now? :confused:
HMBeaty
06-27-2011, 01:28 AM
So, is this safe to turn back on, now? :confused:
If you've upgraded to the latest version, yes
Diggo11
06-27-2011, 01:33 AM
If you've upgraded to the latest version, yes
Which does not seem to let you be able to create new rule sets... (effectively, at least.)
LauraM
06-27-2011, 01:38 AM
If you've upgraded to the latest version, yes
Thanks. :)
Alfa1
07-16-2011, 10:24 AM
Since the upgrade my users need to accept the rules 2 times. Once at the start of registration(default rules with tickbox) and once after registration (with the counter). How do I disable the default rules so that my users only have to accept the CYB rules?
Tyran1
07-16-2011, 11:39 AM
WARNING: "Cyb - Advanced Forum Rules" Exploit! vBulletin
was this fixed already?
cellarius
07-16-2011, 05:18 PM
Just three posts above yours:
If you've upgraded to the latest version, yes
twista46
10-14-2011, 10:33 AM
BBCode work not on Seconds Rulez how can fix it?
cstreater
10-14-2011, 06:07 PM
BBCode work not on Seconds Rulez how can fix it?
I don't think it evert has. At least I could never get it to. Use HTML instead.
Just so you know, this version is still vulnerable, you might wish to check through the code again.
Did you ever report this?
viprtwo
11-09-2011, 06:35 PM
Has anyone else been hacked since installing 4.0.5?
Alfa1
11-14-2011, 04:51 AM
No, it works well.
mk craig 42
12-19-2011, 03:20 PM
Is there any way I can restrict users from viewing certain rules based upon their usergroup? As I don't want my users viewing forum rules for sections that they don't even have access too.
For example.. restricting Registered Users from viewing rule ID 2, 3, 4, 5 etc...
and then restricting Elite Members from viewing rule ID 3, 4, 5 etc...
So Elite members would only be able to view rule 1 and 2.
and Registered members are only able to view rule ID 1.
I've removed the "More Rules" drop down menu, but they can still change the number at the end of the URL to see a list of different rules
Thanks if you can help me.
TravisWPaquin
08-28-2012, 04:25 AM
How do I extend the box for all my rules to appear?
ravelink69
04-20-2013, 08:22 PM
I know this is an older mod, so I may not get much help here but I will try anyway. I can get this to work on all of my templates except for one. I have tried to copy and past from other templates but this one doesnt show the actual rule box. The link shows up and you can click on it to go to the rules section, and there is a link for me to edit the rules but no actual rules showing. When i click edit rules, it then shows the rules and allows me to edit them but wont actually show.
Anyone else experienced this and may have a workaround? I know its not the mod because it works on other templates.
Thanks
clearchannel
01-30-2014, 02:08 PM
I am running ver 4.05 in vB 3.8.7 PL3 and when I enable this hack it breaks the registration. I logged out and tried to register I receive an error
You have left a required field blank.
The happens in Firefox, Chrome and MSIE. Is here a work around for this issue
m7sen
11-02-2014, 01:18 AM
hello
+i have question about
# Options to force users to accept Forum Rules before can view forums or threads, post replies, PMs, or e-mails ...
can i add rules for each forum?
and any users group must Accept rules before Creat thread or post
and can i Making it always, every time users group must they Accept rules before Creat thread or post
or if i want only in first time or two
or if user have like 100 post can i make it to Accept rules only in first time before Creat thread or post
can u add new option
Extention Tips in advanced thread or post
Show it to users group if they creating a new thread or post and be at the top by Title
and can chosen users group id and can Exception users have more than 1000 post
and can add Extention Tips for each forum
thanks
blind-eddie
11-17-2014, 02:59 PM
hello
+i have question about
# Options to force users to accept Forum Rules before can view forums or threads, post replies, PMs, or e-mails ...
can i add rules for each forum?
and any users group must Accept rules before Creat thread or post
and can i Making it always, every time users group must they Accept rules before Creat thread or post
or if i want only in first time or two
or if user have like 100 post can i make it to Accept rules only in first time before Creat thread or post
can u add new option
Extention Tips in advanced thread or post
Show it to users group if they creating a new thread or post and be at the top by Title
and can chosen users group id and can Exception users have more than 1000 post
and can add Extention Tips for each forum
thanks
You might want to give this (https://vborg.vbsupport.ru/showthread.php?t=174189&highlight=New+Thread+Rules) a try, it works with 3.8 without issue.
Joshua2597
11-22-2014, 12:16 AM
I had 3.8.x and had erros, so for know I am just going to make a thread link to FAQs where my rules will be.
vBulletin® v3.8.12 by vBS, Copyright ©2000-2025, vBulletin Solutions Inc.