Allow Guests to view the ushop

[Polo]

Whenever a guest click on the link to ushop.php he gets the permission error... i would like for guests to view this page only and everything else work the same..... i'm pretty sure is quite simple to accomplish... I just would like for guest to view all the good stuff they are missing :)

hope someone can help me out...

[Zachery]

Whenever a guest click on the link to ushop.php he gets the permission error... i would like for guests to view this page only and everything else work the same..... i'm pretty sure is quite simple to accomplish... I just would like for guest to view all the good stuff they are missing :)

hope someone can help me out...
You will need to remove / change this bit

Find and remove

if ($bbuserinfo['userid'] == 0) {
print_no_permission();
}

Not recomended.

[Polo]

Thank you Zachery :)
Not recomended.
can I know why? :ermm:

[hollyboy]

You will need to remove / change this bit

Find and remove

if ($bbuserinfo['userid'] == 0) {
print_no_permission();
}

Not recomended.

the userid goes here at the place of: userid ?

[Polo]

what about changing it to a non existing number?


if ($bbuserinfo['userid'] == 9999) {
print_no_permission();
}

[Zachery]

what about changing it to a non existing number?
Because unless you go and change it, the unregistered usergroup does not have access to money, or options, and will get a no actions found error.

[hollyboy]

I have the same problem with another page.
I want this page to not be viewble for the unregistered users, what do I have to do?

[Polo]

Because unless you go and change it, the unregistered usergroup does not have access to money, or options, and will get a no actions found error.
well maybe I can just change to "no actions found error" to something like "no actions found, in order to use the action you need to register" and make the register word an active link to the registration form...

can I create some type of security issue by adding this small modification?

I have the same problem with another page.
I want this page to not be viewble for the unregistered users, what do I have to do?
he already posted the solution... :)

[hollyboy]

he already posted the solution... :)

where? :ermm:

[Polo]

You will need to remove / change this bit

Find and remove

if ($bbuserinfo['userid'] == 0) {
print_no_permission();
}

Not recomended.
here

[hollyboy]

here
:ermm: There is something wrong then...
The page I don't want the guest to view is this one: http://www.interfans.org/forum/profil_pic.php


Here's the code, as u can see there is no the code mentioned before

<?php
error_reporting(E_ALL & ~E_NOTICE);

// ##################### DEFINE IMPORTANT CONSTANTS #######################
define('NO_REGISTER_GLOBALS', 1);
define('THIS_SCRIPT', 'profil_pic');

// get special phrase groups
$phrasegroups = array('cpglobal','forum','user');

// get special data templates from the datastore
$specialtemplates = array();

// on met en cache les templates
$globaltemplates = array('PROFIL_PIC','profil_pic_lettres','profil_pi c_liste');

// pre-cache templates used by specific actions
$actiontemplates = array();

require_once('./global.php');

globalize($_REQUEST, array(
'lettre' => STR,
'usergroup' => STR,
'ordre' => STR
));



if (!$ordre)
{
$ordre="ASC";
$image="desc";
}

if ($ordre == "ASC")
{
$ordre2 = "DESC";
$image="desc";
} else {
$ordre2 = "ASC";
$image = "asc";
}

if ($lettre!="")
{
$condition = "AND user.username LIKE ('$lettre%')";
$tri = "ORDER BY user.username";
if (!$ordre)
{
$ordre = "ASC";
$ordre2 = "DESC";
}
}

if ($usergroup != "")
{
$tri = "ORDER BY user.usergroupid";
if ($ordre=="DESC")
{
$ordre2 = "ASC";
$image = "asc";
} else
{$ordre2 = "DESC";
$image="desc";
}

} else $tri = "ORDER BY user.username";

$pagenumber = $_REQUEST['page'];
if ($pagenumber == "") $pagenumber=1;
$page_start=($pagenumber-1)*10;

$listes = $DB_site->query("
SELECT profil.userid, profil.profilepicdata, profil.filename, user.username AS username, user.usergroupid AS usergroupid, usergroup.title AS title, usergroup.opentag AS open, usergroup.closetag AS fin
FROM ". TABLE_PREFIX ."customprofilepic AS profil
LEFT JOIN ". TABLE_PREFIX ."user AS user ON (user.userid=profil.userid)
LEFT JOIN ". TABLE_PREFIX ."usergroup AS usergroup ON (user.usergroupid = usergroup.usergroupid)
WHERE profil.visible='1' $condition
$tri $ordre LIMIT $page_start,10 ");

$result= $DB_site->query_first("SELECT COUNT(profil.userid) AS nb FROM ". TABLE_PREFIX ."customprofilepic AS profil LEFT JOIN ". TABLE_PREFIX ."user AS user ON (user.userid=profil.userid)
LEFT JOIN ". TABLE_PREFIX ."usergroup AS usergroup ON (user.usergroupid = usergroup.usergroupid)
WHERE profil.visible='1' $condition
$tri $ordre");

// on construit maintenant la navigation entre les pages
$totalpages=ceil(($result[nb])/10);

$alt = "1";
$show['first'] = "1";
$show['prev'] = "1";
$show['next'] = "1";
$show['last'] = "1";
$firstnumbers[first] = "1";
$firstnumbers['last'] = $totalpages;
$total = $totalpages;

if ($pagenumber==1) $show['prev'] = "0";
else $prevpage=$pagenumber-1;
if ($pagenumber == $total) $show['next'] = "0";
else $nextpage=$pagenumber+1;

for($i=0;$i<$totalpages;$i++) {
$curpage=$i+1;
if($pagenumber==$curpage) {
eval("\$pagenav .= \"".fetch_template('pagenav_curpage')."\";");
} else {
if ($usergroup!="")
{
$address = "profil_pic.php?usergroup=oui&amp;ordre=$ordre";
eval("\$pagenav .= \"".fetch_template('pagenav_pagelink')."\";");
}
else if ($lettre != "")
{
$address = "profil_pic.php?lettre=$lettre";
eval("\$pagenav .= \"".fetch_template('pagenav_pagelink')."\";");
}
else {
$address = "profil_pic.php?";
eval("\$pagenav .= \"".fetch_template('pagenav_pagelink')."\";");
}
}
}


eval("\$navigation = \"".fetch_template('pagenav')."\";");

while ($liste=$DB_site->fetch_array($listes))
{
eval("\$pic .= \"".fetch_template('profil_pic_liste')."\";");
$alt++;
if ($alt>2) $alt="1";
}

$navbits[lastelement] = "Gallery";

for ($i=65; $i < 91; $i++)
{
$currentletter = chr($i);
if($currentletter==$lettre)
{
$thisletter="1";
} else
{
$thisletter="0";
}
eval("\$lettres .= \"".fetch_template('profil_pic_lettres')."\";");
}

eval("\$navbar = \"".fetch_template('navbar')."\";");
eval("print_output(\"".fetch_template('PROFIL_PIC')."\");");

?>

[Polo]

Well then you are in the wrong forum, because this is just for the ushop ucash hack... anyways, i wouldnt know the answer... and I dont know if someone will help you since as I said, this forum is for the ushop, ucash hack...

[hollyboy]

I thought it was the same problem, sorry

[Polo]

oh dont worry... maybe you should try the general modifications forum... i'm pretty sure someone will be able to help you out...

[hollyboy]

ok polo thank u ;)

[Polo]

ok polo thank u ;)
Your welcome, and hope you find a solution. :)

[Polo]

I tried what you said zachery.. however... guests arent able to see the shop :( even when I applied what you told me