Removing Session Hash

[KelteN]

Is there a hack that removes the session hash in the urls? I have done a search on this board, and the only solution I could come up with was removing $session[sessionhash] from all templates. If this is the only way, is there an easy way to quickly delete them from all the templates all at once?

Thanks :squareeyed:

[Chris M]

Just run this query:

UPDATE user SET nosessionhash=1

That will set all users to have no sessionhashes, then edit the registeradult template, and remove:

<tr>
<td bgcolor="{secondaltcolor}"><normalfont><b>Browse board with cookies?</b></normalfont><br>
<smallfont>Clicking yes will use cookies to keep your id for this session. Clicking no will send it through the links. (Selecting no may cause problems with proxies)</smallfont></td>
<td bgcolor="{secondaltcolor}"><normalfont>
<input type="radio" name="nosessionhash" value="yes" checked> yes
<input type="radio" name="nosessionhash" value="no"> no
</normalfont></td>
</tr>

and the registercoppa template, and remove:

<tr>
<td bgcolor="{secondaltcolor}"><normalfont><b>Browse board with cookies?</b></normalfont><br>
<smallfont>Clicking yes will use cookies to keep your id for this session. Clicking no will send it through the links. (Selecting no may cause problems with proxies)</smallfont></td>
<td bgcolor="{secondaltcolor}"><normalfont>
<input type="radio" name="nosessionhash" value="yes"> yes
<input type="radio" name="nosessionhash" value="no" checked> no
</normalfont></td>
</tr>

and the modifyoptions template, and remove:

<tr>
<td bgcolor="{secondaltcolor}"><normalfont><b>Browse board with cookies?</b></normalfont><br>
<smallfont>Clicking yes will use cookies to keep your id for this session. Clicking no will send it through the links. (Selecting no may cause problems when sharing links with people behind the same proxy as you)</smallfont></td>
<td bgcolor="{secondaltcolor}"><normalfont>
<input type="radio" name="nosessionhash" $nosessionhashchecked value="yes"> yes
<input type="radio" name="nosessionhash" $nosessionhashnotchecked value="no"> no
</normalfont></td>
</tr>

Now edit member.php, and remove:

if ($bbuserinfo[nosessionhash]) {
$nosessionhashchecked="checked";
$nosessionhashnotchecked="";
} else {
$nosessionhashchecked="";
$nosessionhashnotchecked="checked";
}
and:
$nosessionhash=iif($nosessionhash=="yes",1,0);
and:
nosessionhash='$nosessionhash'
Now edit register.php, and remove:
$nosessionhash=iif($nosessionhash=="yes",1,0);
find:
,nosessionhash,avatarid
replace with:
,avatarid
find:
,'$nosessionhash','$avatarid'
replace with:
,'$avatarid'

:)

This way they cannot update their profiles to enable sessionhashes again:)

Satan

[KelteN]

Wow! Thanks Man! Works great!

[filburt1]

Remember, guests by default have sessionhashes. However I released a hack for that (at least in the case of Googlebot).

[Chris M]

No problems KelteN:)

Here is filburt's hack link - https://vborg.vbsupport.ru/showthread.php?s=&threadid=50805

:)

Satan

[gmarik]

Filburts hack really works only "theoretically".
hellsatan, you should make a release of this hack.

[Chris M]

I should, but it is not really something that is always wise - User's browsers who cannot accept cookies would literally be screwed out of using vBs;)

Satan