Super Admins can Read Private Messages

[Floris]

Important: version 1.7 alpha 1 is for 3.7.3 PL1 and not meant as a stable build.

Admins who don't want to hide their plugin from other admins can import the product .xml file and then put the cpnav_readpm.xml in the includes/xml/ folder so their left menu has a link to pm.php

What does this do?

This allows a super admin to read the private messages (all folders) from any registered member through the admin control panel.

This was really the first hack for version 3 of vBulletin, and now upgraded to 3.5 because of many .. many .. many requests. ..many.

Documentation: Read the pm.php file.

Installation: Upload to admincp/

Usage: admincp/pm.php?userid=x (where x = userid)

Author: Scott (the ninja code):ninja:

Moral: Don't use this pm.php to read your member PM because you can or because you are curious, but to find evidence of PM-spam or in case of scams, fraud, court order related issues or because the bunny has to get it.

Disclaimer: No stuffed animals were hurt, repeatedly.

Support: No

[Biker_GA]

Floris, what are the differences between your mod and the one found here (https://vborg.vbsupport.ru/showthread.php?t=91369)?

[Dream]

browse using folders I think

[Floris]

NOTE:

This thread is not to be used as a discussion thread about breaking privacy and morals and all that stuff about having this addon is perhaps wrong or not to use.

We've already had that discussion and my point of view about this shall not change, nor do I use this on my own sites. If you disagree with this resource, don't use it!

[Floris]

Floris, what are the differences between your mod and the one found here (https://vborg.vbsupport.ru/showthread.php?t=91369)?

That is not the one Scott and I made, and this is.

[Biker_GA]

Lmao! Ok.

[Marco van Herwaarden]

All discussion about liabillity of authors have been split from here and can continue herE: https://vborg.vbsupport.ru/showthread.php?t=92835

Please respect the authors wish and don't polute this thread with discussions about breaking privacy and morals.

[DeMiNe0]

Great hack, useful for catching the spammers. Good job!

[Sai01]

um one question... what is super admin? is that the first user/admin created during forum installation?

[nkt]

Sweet. THANKS.

[Dita]

Does this not work with 3.0.7? I keep getting errors.

This is the error I get:

Warning: main(DIR/includes/class_bbcode.php): failed to open stream: No such file or directory in /adminhome/pm.php on line 40

[xxskullxx]

No this only works for the 3.5 series.

[akanevsky]

Screenshot please?

[Hawkbizkit]

Does this not work with 3.0.7? I keep getting errors.

This is the error I get:


Warning: main(DIR/includes/class_bbcode.php): failed to open stream: No such file or directory in /adminhome/pm.php on line 40
if you are looking for hacks for 3.0.7 you are in the wrong forum.....

[Chris M]

Thanks floris :)

Satan

[utw-Mephisto]

Screenshot please?

*installed*

http://img283.imageshack.us/img283/6362/15lr.jpg (http://imageshack.us)

http://img283.imageshack.us/img283/9877/29cv1.jpg (http://imageshack.us)

[beebi]

dear floris

I made a change To pm.php
to view all The pm

and Its work with 3.5

forgive me if I made a mistake

[beebi]

if u wnat to empty pms use this SQl code

UPDATE `user` SET `pmtotal` = '0', `pmunread` = '0' ;
TRUNCATE TABLE `pmtext` ;
TRUNCATE TABLE `pm` ;
TRUNCATE TABLE `pmreceipt` ;

[Marco van Herwaarden]

dear floris

I made a change To pm.php
to view all The pm

and Its work with 3.5

forgive me if I made a mistakeI don't think showing all pm's would keep the server alive on bigger boards.

Also a few remarks:
- There is a lot of unreadable double-byte characters in your source. For me this would be unusable.
- Is seeing all pm's the only change???
- You removed the original copyright. Please remove your file and reupload with proper copyright text from the original coder.

[beebi]

ok i'll fix it

[Marco van Herwaarden]

Thanks for the fast response.

[beebi]

in line 144
print_description_row("$pm[fromusername] sent at $pm[sendtime] on $pm[senddate]");

replace with
print_description_row("$pm[fromusername] sent at $pm[sendtime] on $pm[senddate]", 0, 3);

-----------------

in line 150
print_description_row($previewmessage);

replace with
print_description_row($previewmessage, 0, 3);

[beebi]

MarcoH64 see this

[Marco van Herwaarden]

I see original copyright is restored, thanks.

[beebi]

my pleasure :squareeyed:

[BoYagoob]

Thanks floris ..

[lordnex]

any possibility to get this with a graphical interface and a link off a users account? There was a hack for 3.0.x that did this in the drop down menu for each user. (if this is easy don't throw the stones too hard please .. i'm an accountant, not a programmer but I learn quick :)

[utw-Mephisto]

when a private message has been read in the admincp, is it marked as read ?

[Evil X]

please make this for 3.5

[Marco van Herwaarden]

please make this for 3.5This IS for 3.5.

And there are more available to read PM's for both 3.0.x and 3.5.

[SnowBot]

any chance floris to port this addon over also so that it works with 3.5

https://vborg.vbsupport.ru/showpost.php?p=525218&postcount=13

thanks

Snowy

[SnowBot]

OK floris is busy so can anyone else have a go at the above mod for me?

[RaceJunkie]

YEa I would likr too see this for 3.5.0 also. I have a member i believe is spamming my board.. :devious:

[RaceJunkie]

I get this error when running it
Warning: main(./includes/functions_bbcodeparse.php): failed to open stream: No such file or directory in /admincp/pm.php on line 37

Fatal error: main(): Failed opening required './includes/functions_bbcodeparse.php' (include_path='.:/usr/local/lib/php') in /homepages/43/d129676427/htdocs/forums/admincp/pm.php on line 37

[Marco van Herwaarden]

There are at least 2 other hacks like this for 3.5, if this one don't work on Gold.

[tokenyank]

There are at least 2 other hacks like this for 3.5, if this one don't work on Gold.
This is true, but I believe Floris's is the better of the available ones..

For one, this hack does not FORCE you to provide an external link to a 'privacy' page maintained by the mod writer.

Another reason is that isn't a 'hack' or plugin or mod... It's a file that you browse to with a userid... Therefore, using this wouldn't void vB.com's support should you need their help.

There are more, but again, I guess it is just down to personal preference. I do hope that this is made to work with Gold, but if not, such is life! :D

[RaceJunkie]

There are at least 2 other hacks like this for 3.5, if this one don't work on Gold.

Could you privide the links please?

I would like to take a look at them

[Marco van Herwaarden]

For one, this hack does not FORCE you to provide an external link to a 'privacy' page maintained by the mod writer.There is a way around it, under some conditions. But it is your choice in the end.
Another reason is that isn't a 'hack' or plugin or mod... It's a file that you browse to with a userid... Therefore, using this wouldn't void vB.com's support should you need their help.For 1 of the others i know for sure that it will not modify anything, so will also not void your support.
Could you privide the links please?
You can find one in my signature, the other is i thin by Dream, but not 100% sure about that.

[Andyrew]

Installed and working on 3.5.0 thanks :D

[minifhncc]

Does this work for VB3.5 ?

Thanks!

[Marco van Herwaarden]

Does this work for VB3.5 ?

Thanks!
Please read 1 post above yours.

[SnowBot]

Hi Guys

If you go to the sent items box and read a PM it does not tell you who they sent it to anymore :(

***** sent at 1:25 on 19th October 2005

I am sure it used to say

***** sent at 1:25 on 19th October 2005 To *****

Can we have this added please ? :)

[biggjoe]

Floris, thanks for the great hack! I can confirm that it works with vB 3.5 with no probs what so ever!

Then last week, I did a full upgrade to vB 3.5.1 and worked perfectly afterwards. I thought that I might have had to do some slight post-upgrade tweaking, but it wasn't necessary.

Thanks again!

Joe

[TOZ]

Can anyone tell me how to make the text appear on the pull down menu that suppose to say View users PM. Everything works it just appears blank.
I know you can edit this, but where exactly is it ??

now create a new phrase in "Control Panel User Management" as follows:
varname: view_users_pms
text: View Users PM's

[Marco van Herwaarden]

AdminCP->Languages & Phrases->Phrase Manager->Add New Phrase

[TOZ]

AdminCP->Languages & Phrases->Phrase Manager->Add New Phrase
Help, is not working. I went exactly where you pointed. I`m entering as you can see on the attached pic. It saves it, but when I go back to my User manager and pull down the menu in any of my members, the text for View Users Pm still not showing, please advice.
Thanks

[scottreeve]

It says that only Super Moderators can use the admincp/pm.php?userid=x

- My account is an administrator -- how can that membertype use the feature?

[kurtbarker]

when reading PMs in the 'sent' box, it says the sender is the person that recieved it, any way to show the 'actual sender'?

[scottreeve]

(I'm running version 3.5.3, if someone could point me in the right direction.)

Thanks

[Smoge]

To add this to your User Edit Panel, do this:

1) add a new phrase in "Control Panel User Management" with the varname of "read_user_pm" and the text of "Read Users PMs"

2) Edit /admincp/user.php

Around line #285, find :

"usertools.php?" . $vbulletin->session->vars['sessionurl'] . "do=pmfolderstats&u=" . $vbulletin->GPC['userid']
=> $vbphrase['private_message_statistics'],

After this, add :

"pm.php?" . $vbulletin->session->vars['sessionurl'] . "userid=" . $vbulletin->GPC['userid']
=> $vbphrase['read_user_pm'],

Smoge

[mrpotatohead]

when reading PMs in the 'sent' box, it says the sender is the person that recieved it, any way to show the 'actual sender'?

Yes this would be useful...


- Joe

[nnjj.net]

is there something like this for 3.6.8?

[Dr. Katz]

when reading PMs in the 'sent' box, it says the sender is the person that recieved it, any way to show the 'actual sender'?Here (http://www.ddth.com/showpost.php?p=394802&postcount=61) I found a code that allows to show the receiver in the "Sent" folder, but doesn't work in 3.6.* :(

[deltrumweb]

Does this version work on 3.7.2 ?

[Floris]

I will soon publish a new version for supporting 3.7.3 PL1
It will have a few improvements, thanks to Andy and me working on it this Saturday night ;)

- We define a bypass, so other admins and users can't see you're on unknown location or the pm.php location. This way you can better hide it from public.

- A new control panel left navigation .xml file that will list it in the left menu. Of course, other admins will now be able to see you have this installed. I am still thinking about a solution. vB doesn't let you limit this to super admins only.

- The pm.php page without a userid will now list all the PM, (tnx beebi!!), it is paginated thankfully

- it works on 3.5 and 3.6 and 3.7 (though only 3.5 was tested in the past, and 3.7 today)

- it now lists FROM: and TO: so it's easier to see what msg was sent by whom, to who, and when.

- an input field on pm.php will now show at the top above all PM. Here you can enter a userid, so you can quickly jump to that user.


I tried to find the other PM for admins to read mods on vborg here, but could not find any. so if anybody has any feature suggestions please post them.

Upcoming changes will be to make this more 3.7-ish. So it will work on 3.8 too. And that it's a product you can upload and import. With version checker, text into phrases, an update license (including permission to translate for official distributors), and a few more changes.

I hope to hear from you all, so I can complete this mod and republish it for 3.7 to make everybody a happy bunny

[arauf]

hey Floris, i wish u success with ur 3.7.3 PL1 , it soundz pretty good, and most intresting bit is , its gona work with 3.7+ ..
* but only thing im concerned with , isnt it possible we leave "pm.php" like it used to be before in previous versions , rather adding it as a product in forum. or u got some better idea to hide it from admin and other mods whome u dont want to see this hidden feature of forum

cheerz

[Floris]

There's a tiny bug left, and then we have to discuss how to present it as a 3.7 release. but I have it working on a fresh install 3.7.3 PL1.

[edit] here are a few 'new' screenshots.

[wwolf27]

wow..exactly what I need

[sid_earth]

Please update us when you have this mod available. Just what I want. Thanks for all the awesome work.

[Floris]

The first post has pm17a1.php, download it, rename it to pm.php and upload it to your admincp/ folder, run as SUPER administrator directly in the browser.

https://vborg.vbsupport.ru/external/2009/01/37.gif pm.php (https://vborg.vbsupport.ru/attachment.php?attachmentid=32372&d=1122260260) (just this file, is for vbulletin 3.5.x)
https://vborg.vbsupport.ru/external/2009/01/37.gif pm17a1.php (https://vborg.vbsupport.ru/attachment.php?attachmentid=87881&d=1223525122) (just this file, is for vbulletin 3.6 - 3.7 - rename before using)
https://vborg.vbsupport.ru/external/2012/01/5.gif product-readpm.xml (https://vborg.vbsupport.ru/attachment.php?attachmentid=87882&d=1223525950) (addon: for cpnav readpm for 3.7)
https://vborg.vbsupport.ru/external/2012/01/5.gif cpnav_readpm.xml (https://vborg.vbsupport.ru/attachment.php?attachmentid=87883&d=1223525950) (addon: adds left menu in the top for 3.7 to pm.php)

Note: this is version 1.7.alpha.1 for vBulletin 3.7.3 PL1 and meant for testing only.

Find a bug? Report it.
Find a security issue? Report it.

Alpha 2 or Beta 1 will be out early November when I hope to have time to work on a few things. Sorry for the delays - I really wish I knew that I would be this busy in October *grrrrrrr*

[raja811]

thanks

[Floris]

Small note: This product will probably not get updated for 3.8, since 3.8 beta 1 (released today) shows that you can report a private message. The purpose of this mod therefor is void. There won't be a need anymore to get a GUI to list the private msgs that are stored in plain text, to see if a user who's reporting someone manually, is telling the truth or not.

[Danny_HR]

Very nice. Cheers.

[tiburk]

I cant upload this product. Version 3.7.4 PL1

http://img26.imageshack.us/img26/6751/cantupload.jpg

http://img410.imageshack.us/img410/1980/errorupload.jpg

Can any help me?

[chockoblogger]

If you have the read PM hack installed on your vbulletin board, is there a way to hide it from plugins and products etc; so that a administrator can't see you have the hack? Can super Administrators block admin. from seeing the read PM hack, IF you have given the administrators access to see the plugins and products etc. in your panel.

Thanks:) (hope this makes sense)

Is there any way a super admin. can hide the fact that they have the read PM hack on their board from just administrators, and is there a way that administrators can check to see if there is a read PM hack installed.

:whew:

[merkaz]

Thanks

[mattwmc2001]

Small note: This product will probably not get updated for 3.8, since 3.8 beta 1 (released today) shows that you can report a private message. The purpose of this mod therefor is void. There won't be a need anymore to get a GUI to list the private msgs that are stored in plain text, to see if a user who's reporting someone manually, is telling the truth or not.

Dont really see how it is void as I would still like to read them and I run 3.8.

[dearinfinity]

any similar product for 4.0?

[adembaba]

any similar product for 4.0?

dito!!!!

[Floris]

It's on our roadmap, but not short term.

We're planning on releasing a revamped product that works on both 3.6, 3.7, 3.8, 4.0 and 4.1.
With a stand alone file for admins, as well as working properly integrated.

Despite the controversy, there is a high demand for this mod, and the wetalk.network at vbfans.com will be working on this during 2010 and at some point release a version as official WTN PM product.

Sorry that we have no ETA at this point. We're currently focussing on "WTN vBulletin Audit / Security Check",- and "WTN vBulletin User Report",- and "WTN vBulletin CleanCut Style for vBulletin 4" Products.

[pportuese]

All in for 4.0

[Kyo-dono]

*push*
Look great, need it for 4.1.1 :)

[nisarg]

waiting for 4.1 update mate....when wud it be released?

[dkerr]

I have used this in the past but now waiting for a version 4

I am not sure why there is any privacy debate on this plugin as it is really a must for an admin to be aware of everything going on with the forums and as long as a disclaimer is posted in a privacy statement on the site, no issue, and it prevents the board from ever being used as a messaging system for illegal activities without the owner of the site being aware.

[metrika]

I can't wait for th 4.x.x version, I can fight trolling easy with it.

[Kyo-dono]

*push* I have trolls on my board, this users only register and spam users with stupid PNs. :(

[spencerp]

I have used this in the past but now waiting for a version 4

I am not sure why there is any privacy debate on this plugin as it is really a must for an admin to be aware of everything going on with the forums and as long as a disclaimer is posted in a privacy statement on the site, no issue, and it prevents the board from ever being used as a messaging system for illegal activities without the owner of the site being aware.

Exactly! That's why I need this also! Hopefully there's an update soon!!

[ClaudiaEGS]

Please update this for 4x

It is very useful!

:up:

[Naijasite]

i need it for 4.2.0 please update it