Trap Banned Members: They can not logout (VB3)

[Logician]

I'm releasing this ported version of an old very tiny hack upon request. It is a 1 line hack that prevents banned usergroups (or any other usergroup you want) to log out. Since they can not log out, they can not reregister either.

The hack prevents them to clear the cookies so they are stuck with their banned usernames in the forum. But obviously this applies:
a) If user is a cookie user
b) If he is not able to clear them manually in his computer.

So the hack is effective for novices only. Tested in vB3.0.0, should work in all vb 3.x versions though. Vb2.x version is here (https://vborg.vbsupport.ru/showthread.php?s=&threadid=37549). Click install (https://vborg.vbsupport.ru/vborg_miscactions.php?do=installhack&threadid=63013) if you use it, thanks!

VB3.5 version is here:
here (https://vborg.vbsupport.ru/showpost.php?p=783226&postcount=70)


Enjoy!

[Boofo]

Welcome back! I hope this is just the first of many great hacks from you, my friend. Been waiting a long time for you to get back into the old grind with us here. ;)

[gmarik]

This is really hard - this is something to believe in...

[Koutaru]

:D Excellent. Thanks Logician!

[FleaBag]

This is definitely going to be of great use to me. :D

[AutomatikStudio]

Wow...this solves so many problems on my boards...

[wrongful]

thank you

[Zachariah]

nice

[Merjawy]

Nice hack thnx,

as for the user must be using cookies, thats easy.. you just make that group use cookies which is simple in vB3 by global edit command :)

[Charlie Argueta]

I was looking for something so evil and easy as well :D

See Ya

[Mr. Brian]

One of my idol finally back in action!

[???`S?LV?R???`]

very nice idea (clicks install)

[Zelda-King]

Thanks! Been awaiting this one.

[datainternet]

Thx dude for this great hack!!!

MFG datainternet

[bluecat]

Thank you.

[bluecat]

I found myself (as administrator) being unable to log out, even though the XX are replaced with the id's of banned and banned by mods. This happen to anyone else?

[akiy]

Wouldn't this be "not nice" for those people using public computers (eg at a library)?

[TRStealth]

Well, if they're banned, what difference would it make? The account would basically be useless.

[akiy]

True, the banned account is useless, but it also means that anyone else using that specific computer/browser will be unable to log in. For example, if I'm using a shared computer and my account gets banned on your forums, anyone else who will be using that computer to access your forums will not be able to log in (unless the cookies got wiped).

[Charlie Argueta]

In the last days I have been thinking in a evil modification :devious: is it possible to add some adons to this hack.

For example is it possible to at the same time block the access to the new threads automaticly when you using this hack, also specificate the vissible parts, as Terms of Use :rolleyes:

See Ya

[GamerzWorld]

Perfect, works great :) Ty

[JoergZ]

I had this hack already in my vB2 and now in vB3. *installed*

But I have a little suggestion for an improvement: To not insert hard-coded the usergroupid in the PHP, how about that:

if ($permissions['genericoptions'] & ISBANNEDGROUP)

I have tested it and works fine for me in vB3 Gold.


Regards

J?rg

[Sin City]

wow... awesome hack man... thank you :)

[RugBurn]

Thank you sir.

[MentaL]

gr8 ;)

[Massacure]

So, what happens if they are banned while they are logged out? If they are logged out will it allow them to log in before banning them?

[rinkrat]

Edit file "login.php", find line:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
// clear all cookies beginning with COOKIE_PREFIX
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

That does not exist in GOLD login.php

[Logician]

So, what happens if they are banned while they are logged out? If they are logged out will it allow them to log in before banning them?
yes they can log in ok.

That does not exist in GOLD login.php
It does. Check carefully around lines 50-55.

[Bulent Tekcan]

Dear JoergZ

Can you explain me ?

I had this hack already in my vB2 and now in vB3. *installed*

But I have a little suggestion for an improvement: To not insert hard-coded the usergroupid in the PHP, how about that:

if ($permissions['genericoptions'] & ISBANNEDGROUP)

I have tested it and works fine for me in vB3 Gold.


Regards

J?rg

[Logician]

Dear JoergZ

How can I add this line ?
huh?

[Skyline_GT]

Good stuff.

[bluecat]

Nice hack thnx,

as for the user must be using cookies, thats easy.. you just make that group use cookies which is simple in vB3 by global edit command :)

Hi. I know to go into phrase manager, but you can explain how to do this exactly? Do I have to add or edit an existing phrase, if so, what exactly? Thanks.

[hollyboy]

nice. I've clicked on install

[hollyboy]

I get this error

Parse error: parse error in /home/interfan/public_html/forum/login.php on line 63

My line 63 is:

if ($bbuserinfo['usergroupid']==15 {print_no_permission(); exit;}

[Logician]

I get this error

Parse error: parse error in /home/interfan/public_html/forum/login.php on line 63

My line 63 is:

if ($bbuserinfo['usergroupid']==15 {print_no_permission(); exit;}
if ($bbuserinfo['usergroupid']==15) {print_no_permission(); exit;}

[0zone]

Nice hack. :)

Thank you for posting this one.

[clicks install]

[Flow Fusion]

Thank You For This!

[Cold Steel]

/me installs.

[dutchbb]

Parse error: parse error in /home/httpd/vhosts/dutchbodybuilding.com/httpdocs/forum/login.php on line 58


if ($bbuserinfo['usergroupid']==9) OR $bbuserinfo['usergroupid']==11) {print_no_permission(); exit;}



SOLVED!!

should be

if ($bbuserinfo['usergroupid']==9 OR $bbuserinfo['usergroupid']==11) {print_no_permission(); exit;}

Great hack logician :D

[sv1cec]

Nice hack thnx,

as for the user must be using cookies, thats easy.. you just make that group use cookies which is simple in vB3 by global edit command :)

Can you please elaborate on that? I am not sure I know how to set it up.

Tnx

[aranthorn]

Nice hack, just had to use it.

[Mtmm]

Wonderfull hack! Thx!

[Blam Forumz]

/me installs and drools

[roundhost]

fantastic, original idea!

/me clicks install

[lifesourcerec]

seems no one can logout, not just banned users. everything is installed correctly.

[Logician]

seems no one can logout, not just banned users. everything is installed correctly.
make sure you applied the code as "($bbuserinfo['usergroupid']==XX)" not "($bbuserinfo['usergroupid']=XX)" (and to the correct place)

[lifesourcerec]

make sure you applied the code as "($bbuserinfo['usergroupid']==XX)" not "($bbuserinfo['usergroupid']=XX)" (and to the correct place)

This is the line added:

// Logician Hack : Banned users can not logout
if ($bbuserinfo['usergroupid']==10) {print_no_permission(); exit;}
// Logician Hack : Banned users can not logout

[Logician]

This is the line added:
If you applied it to the correct place, people except usergroup 10 should log out fine.

[lifesourcerec]

Keep getting this:


An error occurred while attempting to log you out. Click here to log out.

[Logician]

I don't think this is related to the hack. Remove it and probably you'll still get it.

[lifesourcerec]

I'll try it and let you know. I'll just comment it out.

[sv1cec]

Keep getting this:
This error message, is usually shown if you are in the forums as a simple user (like when you are testing the hack) and at the same time, you use another window to change something in the AdminCP, as the administrator. vBulletin gets mixed up and shows that message.

Rgds

[integra99]

This error message, is usually shown if you are in the forums as a simple user (like when you are testing the hack) and at the same time, you use another window to change something in the AdminCP, as the administrator. vBulletin gets mixed up and shows that message.

Rgds
Also, VB changed the way users logout I believe in one of the RC's. The originally just did a /login.php?do=logout and since have updated it to /login.php?do=logout&u=$bbuserinfo[userid]. Make sure to check your templates, or revert them if necessary.

[The Coldwood]

I'm releasing this ported version of an old very tiny hack upon request. It is a 1 line hack that prevents banned usergroups (or any other usergroup you want) to log out. Since they can not log out, they can not reregister either.

The hack prevents them to clear the cookies so they are stuck with their banned usernames in the forum. But obviously this applies:
a) If user is a cookie user
b) If he is not able to clear them manually in his computer.

So the hack is effective for novices only. Tested in vB3.0.0, should work in all vb 3.x versions though. Vb2.x version is here (https://vborg.vbsupport.ru/showthread.php?s=&threadid=37549). Click install (https://vborg.vbsupport.ru/vborg_miscactions.php?do=installhack&threadid=63013) if you use it, thanks!

Enjoy!
You are a modern-day genius!

[lifesourcerec]

Also, VB changed the way users logout I believe in one of the RC's. The originally just did a /login.php?do=logout and since have updated it to /login.php?do=logout&u=$bbuserinfo[userid]. Make sure to check your templates, or revert them if necessary.

So, you mean, change this:


login.php?$session[sessionurl]do=logout


to this:

login.php?$session[sessionurl]do=logout&u=$bbuserinfo[userid]


?

[SamirDarji]

Anyone tried this on 3.0.3? I'm thinking of using it in conjunction with the Advanced Warning System (https://vborg.vbsupport.ru/showthread.php?t=71992&goto=newpost) hack.

[AlphaWolf]

thx

-installed

[MajorFm.com]

nice mini hack!

[bulbasnore]

Any way to clear the login in special cases (like banning the user because the screen name is not acceptable)? Some people we want to log back in under a different name.

[kall]

Any way to clear the login in special cases (like banning the user because the screen name is not acceptable)? Some people we want to log back in under a different name.
Banning them to a usergroup other than 10 would do the trick.

[SmartGnome]

Tnx Logician for the hack. I used the old one vor vb2 and totaly overlooked this one :shame

One $ question..... "How can I global edit the user cookie usage" ?

Tnx

[Logician]

Tnx Logician for the hack. I used the old one vor vb2 and totaly overlooked this one :shame

One $ question..... "How can I global edit the user cookie usage" ?

Sorry I didn't understand the question?

[vulture]

Great little hack. Installed on 3.0.7 fine.

[The Piper]

Just installed on 3.0.7, tested, and works wonders. Thanks, Logician! Yet another great hack by you... :D

[DavidN]

Installed ;)

[Bulent Tekcan]

Is it available for 3.5.0 ?

[Logician]

I didn't port it to vb3.5, but I don't know if it is worth porting. Because in 3.5, the users can't see log out link when they are banned. Well they can still log out if they know the URL by memory but if they are that clever, I think they can think of clearing the cookies manually to bypass this hack either. Don't you think?

[Bulent Tekcan]

Yes basicly cannot see this link,but many vB forums everyhere :) Your hack is easy but strong,becasuse maybe %10 users known clear cookies manualy,when I use this hack banned member hang on forum,very simple but good :) If it is available I think many admin pleasure for you.

Thanks

[Logician]

Yes basicly cannot see this link,but many vB forums everyhere :) Your hack is easy but strong,becasuse maybe %10 users known clear cookies manualy,when I use this hack banned member hang on forum,very simple but good :) If it is available I think many admin pleasure for you.

Thanks
ok I'll port it.. np..

[Logician]

ok took 2 min. to port lol. Here you go, VB3.5 version: ;)

[Bulent Tekcan]

Great :) thanks for that reply..

Cheers

[RaZor Edge]

ok took 2 min. to port lol. Here you go, VB3.5 version: ;)
For those interrested: This work as well for 3.6.0 Gold. (use the instruction for 3.5)

https://vborg.vbsupport.ru/showpost.php?p=783226&postcount=70

[bulbasnore]

Sigh. Marked uninstalled. I can no longer maintain it as a code edit. Would love this as a MOD, if that were possible.

[solboy]

Is there a 3.8.1 plugin for this?