PDA

View Full Version : Security for unlincensed users?

TECK
12-07-2002, 06:45 PM
I noticed that unlincesed users can view and post in Full Releases... am I right or wrong?
Chen can you test it please? Create a dummy account and try to browse the Full Releases forum.
I noticed an unlicensed user (Litchie (https://vborg.vbsupport.ru/member.php?s=&action=getinfo&userid=25653)) requested in my forums to get for free vbHome (lite). Obviously he doesn't own a license since his site URL is:
http://www.geocities.com/dutchexplosianrangers

Read more in this thread:
http://www.teckwizards.com/forum/showthread.php?s=&threadid=300

So basically, I think is not good if the unlicensed users can see the contents of the threads in Full Releases. There are several hacks posted as "readable", not attached. They can steal them all.
Attrox
12-07-2002, 06:55 PM
I think it would be a good idea to just close off access to unlicensed users entirely, but that's just me. I don't see why they have access to the forums, in the first place.
Admin
12-07-2002, 07:17 PM
Unlicensed users can read Full Releases, yes, it's not an error.
TECK
12-07-2002, 10:18 PM
If I remember correctly, it wasn't like that before, am I right Chen?
Does the vb.org administration plan on blocking the unlicensed users in "Full Releases"? If not can you please tell us why?
I think protecting the forum from unlicensed users is a must, IMO.
DrkFusion
12-08-2002, 02:02 AM
I thought that unliscensed users can view Full Releases but the threads won't be there.
Cary
12-08-2002, 04:41 AM
Originally posted by DrkFusion
I thought that unliscensed users can view Full Releases but the threads won't be there.

Guests can view the forum and the topics won't show. Unlicensed members can view the topics, but cannot download attachments.
Cary
12-08-2002, 04:43 AM
Originally posted by TECK
If I remember correctly, it wasn't like that before, am I right Chen?
Does the vb.org administration plan on blocking the unlicensed users in "Full Releases"? If not can you please tell us why?
I think protecting the forum from unlicensed users is a must, IMO.

I am certainly not in a position to comment on this, but I don't see a reason to block unlicensed members. Most of the hacks require you to be a license member to download the files/instructions, anyways.

If unlicensed users are able to view the hacks available, they are more likely to purchase vBulletin.
futureal
12-08-2002, 05:05 AM
I agree with Cary. Part of the reason I originally chose vBulletin (back in the 2.0 beta days) was because of the amazing hack support that was offered. I browsed the hack sections for weeks before I got my first license, just to see what was out there and how easily I'd be able to do it to my site.
Logician
12-08-2002, 07:10 AM
Originally posted by futureal
I browsed the hack sections for weeks before I got my first license, just to see what was out there and how easily I'd be able to do it to my site.
same here..
Chris M
12-08-2002, 04:45 PM
Perhaps making it manditory to post either a .zip or .txt file with each Hack release;)

Satan
Erwin
12-08-2002, 08:16 PM
This is why I keep reminding hack authors to stop posting instructions in the thread itself, no matter how simple, but attach it in a text file.
Chris M
12-08-2002, 08:30 PM
Or even better - Attach it in a .php file;)

That way vB does NOT parse variables such as { imagesfolder };)

Satan
TECK
12-09-2002, 05:15 AM
Before Chen had the forum set to see the threads but not the contents... is the best way. Why allow unlicensed users to read the content of the hack? Let them browse the titles only.
I made a hack like that and I install it on my site.
alkatraz
12-09-2002, 06:06 AM
Originally posted by futureal
I agree with Cary. Part of the reason I originally chose vBulletin (back in the 2.0 beta days) was because of the amazing hack support that was offered. I browsed the hack sections for weeks before I got my first license, just to see what was out there and how easily I'd be able to do it to my site.


ditto

there are tones of different forum software out there and the only reason why I went with VBB is because of the hacks out there and the support.
Admin
12-09-2002, 01:32 PM
The reasons for the current set up are expressed in this threads by other users, TECK, and there's nothing more I can say - that's exactly why unlicensed users can read the threads and not only their title.
Xenon
12-09-2002, 01:56 PM
It's a well known discussion here, chen how often did i say something like that to you? ;)

In conclusion you can say both sides have their advantages and disadvantages.
We've choosen one side here, it'll stay.
Erwin
12-09-2002, 07:50 PM
Since this issue is more or less resolved, I'm closing the thread. :)