vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)
-   -   Major Additions - Yet Another Awards System (https://vborg.vbsupport.ru/showthread.php?t=232684)

squidsk 09-02-2012 12:35 AM

What's the vulnerability? Those of us using this mod need to assess the seriousness of the vulnerability. If you could PM the details it would be appreciated as you may or may not have noticed but I've been fixing bugs where I can.

Dave234 09-02-2012 11:56 AM

Quote:

Originally Posted by squidsk (Post 2332723)
Unfortunately not, there's an error in the uninstallation code, actually an omission, that prevents the plugin from uninstalling correctly.

First uninstall YAAS from the product manager.

Then to do what I posted on the previous page, in admincp go to Maintenance->Execute SQL Query

When prompted run the following query:
Code:

show tables
This will give you the list of all tables in your db, look for the ones that have awards in their name, there should be between one and three of them, most likely three. In my db the tables are called:

Code:

award
award_cat
award_requests

The names might be different in your db, especially if your tables have a prefix. Take note of the names, and then run drop table queries, one per table, to remove the tables.

So if I was removing the three tables from my db I'd run the following three queries:
Code:

drop table award
Code:

drop table award_cat
Code:

drop table award_requests
Then I could reinstall YAAS from scratch.

I have removed the above three tables from my database, but I also see another couple:

Code:

award_automation
award_user

Do these need to be removed as well?

squidsk 09-03-2012 12:17 AM

Quote:

Originally Posted by Dave234 (Post 2361938)
I have removed the above three tables from my database, but I also see another couple:

Code:

award_automation
award_user

Do these need to be removed as well?

Those are from the awards automation plugin which is an additional, separate, plugin that works on top of YaAS, I'd uninstall that plugin and remove those tables as well, then you'll have uninstalled all parts of YaAS.

If you look in my sig you'll see a link to a new, unofficial, version of YaAS that I released that fixes many of the bugs in the current official release. I'd recommend using that if you're going to try and re-install. It fixes the uninstall issues among other things. A complete list of fixes/changes is at the post in the link.

apapterx 09-03-2012 03:59 PM

I'm having a slight problem. Everything is working fine apart from member cannot recommend a member.

Any ideas on what to do ?

I get the following:

Quote:

you do not have permission to access this page. This could be due to one of several reasons:

Your user account may not have sufficient privileges to access this page. Are you trying to edit someone else's post, access administrative features or some other privileged system?
If you are trying to post, the administrator may have disabled your account, or it may be awaiting activation.

squidsk 09-03-2012 04:13 PM

Make sure the member is part of a group which has the recommend ability turned on. Its a usergroup setting.

wat3v3r 09-04-2012 01:10 PM

According to a hacking forum v4.0.2 has an exploit and can lead to an SQL injection to your site ?

Will send squidsk a pm with the details... hope he can fix this asap.

hjmaier 10-14-2012 12:20 PM

Great! Thank you very much for the fix!

EasyEazy 10-14-2012 12:55 PM

Great update.

Thanks again

EasyEazy 10-14-2012 03:36 PM

Hi squidsk

After updating there seems to be a problem with the templates in the member info. See the pictures below. The first one was an older version of this mod and the one below is the new version. See how the new version the awards are mashed together with no spacing. Any chance you could help?

https://vborg.vbsupport.ru/external/2012/10/30.jpg

https://vborg.vbsupport.ru/external/2012/10/31.jpg

Thanks

Dave234 10-14-2012 05:24 PM

I see that the mod has been updated. Is it correct that we should now download YaAS-4.0.4.zip and YaAS-Automation-R2.zip?

Can you provide step by step instructions on how to install this mod?

Thanks!


All times are GMT. The time now is 05:08 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.02959 seconds
  • Memory Usage 1,746KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (7)bbcode_code_printable
  • (3)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (5)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete