![]() |
That vulnerability was fixed in 3.6.10, I believe, if you're reluctant to upgrade to 3.7.0.
|
Would be great if anyone could take-over this modification in the absence of the author and successfully port it into 3.7 and even improve it.
|
I am reluctant to upgrade to anything. I do not need the extra functionality of newer releases, but I've been paying Jelsoft annual subscription because of one reason only: I wanted to be sure that in case a security issue was found, I would have the necessary fix for my site. I've been paying them all those years, just for that.
When this vulnerability was announced (and the vulnerability was fixed with vB 3.6.10 and vB 3.7) I contacted Jelsoft complaining about the fact that they didn't issue a security fix for 3.0. Guess what? Next day they announced the end of life of vB 3.0. So no more support. As if this was not a security issue but a simple bug fix. That's how Jelsoft treats its customers. In any case, if I decide to upgrade my site to 3.7, I might work on AWS again. I'll need it for my site and over the years since I stopped working on it, I've improved it greatly. Unfortunately, this will take some time, since I need to first familiarize myself with the new coding acrhitecture of vB, as it has been implemented in vB 3.5 and later releases. So folks, please do not hold your breath. |
Yes!! Can't wait for the release! :D
|
Good mood.. but any update for Vb 3.7.0 ? it s better good
|
Sorry, not from my side. I still do not have a site with 3.7.x to start working on it.
If someone can provide me access to a test site with the latest release of vB, I could start working on this. |
I was looking over this mod as i was thinking of using it and discovered in mysql it creates a table called vb_warningtype and in the file in some spots it tries to use the database vb_warning_types - that may cause some problems you are having
|
The Warning Types table should be named "warning_types". If it is created with "warningtypes" as a name, the hack will NOT work.
|
@sv1cec
contact me true yahoo messenger bro.... i will provide you test forum.. my yahoo messenger: maxie1172000.. |
Quote:
I am currently on vacations, I'll contact you next week, when I'll return home. |
Quote:
|
Folks, I am back from vacation, but it would be impossible for me to do anything about this until the kids are back to school, which is around September 13, if I am not mistaken. If one of you can provide me with the test environment, I can start familiarizing myself with the new coding structure, until the kids are back to school and I have the tranquility to work on the actual AWS code. You can either PM me or email me with the details. Obviously I'll need admin and ftp access to the server.
Many thanks |
I've provided the test environment to sv1cec. Really looking forward to the finished product :)
|
Thanks to Jmurrayhead, I have a working test environment. Don't hold your breath out though, as I said I have lots of thing to learn before I can come up with the code for AWS for vB 3.7.
Thanks Jmurrayhead, appreciated. |
Quote:
|
I am looking forward to the 3.7.2 :D
|
I am waiting for this to.
|
Me 3.
|
i had it working once up on a time
but after a complete template revert and a new install i can't get it to work again when i give the usergroups permisions then i get the databas error : Code:
Database error in vBulletin 3.6.8: thnx |
I do not think that AWS is touching that table. Unless Delphi has added something I am not aware of, that doesn't come from AWS.
|
Quote:
because i can install the mod but when i give the moderator group or admin group the permissions i get this error any help is apriciated in this matter |
uninstalled some mods
deleted some xml files in the includes/xml and now it works again youre answer made me think :up: |
Sorry if I was not too specific, but I haven't touched the AWS code since vB 3.0.xx, but I know it doesn't touch the usergroup table.
|
another waiting for 3.7 release.
|
Delphiprogrammi has started being active again, let's hope he can update this wonderful mod !
|
Quote:
|
hi folks,
I have some spare over the weekend and i will install this on my 37.3 testboard and see what happens |
Quote:
|
hi,
Things i can see right.The profile stuff aws adds there will need a rewrite.Vbulletin changed the profile look between 3.6.x and 3.7.x allot so i will need to figure out how those tabs work.I also received a pm telling me that aws no longer autobans (doesn't work anymore) one more thing to be added is the CSRF protection. |
hi,
I received a report that autobanning does not work.I just checked and it is working please note the requirements for this feature if you want to have a warning to cause a ban once issued you must assign the warningtype the same amount of points as your warning_limit then it should work I have readed through the pages in this thread and i will check the protected usergroups and the unbanning (cron) feature(s) please do not look at the content of my testpost :D :D |
Quote:
|
Quote:
Mr. Delphi, how was your weekend? Any progress? :D |
Quote:
|
Quote:
This is horrible news... :( |
Oh NO !!
Switching to the infraction system is such a great loss :( |
Delphi, welcome back.
The protected user groups should work fine, the check is made near the top of Warn.php in the function check_user. The function itself is located in functions_warning.php. |
hi,
I'll be honest here.I just cannot understand how the new profile pages work i mean there is some explanation here but it's still not clear to me and aws that .... |
Now you know why I hate the new coding scheme that vB is using these days?
Sorry buddy, I wish I could help. However, I think there are ways around it. Maybe you can add a block at the end of profile page with the warning buttons and the warning information. I do not know. It seems that vB is trying to make our lives more difficult, rather than facilitating coders. |
Quote:
I have recently noticed old warnings are not getting removed automatically via Cron. EDIT: Manually executing the cron job: kill_warns, shows that warningype table doesn't exist. Looking over mysql, the table is named warningtype. So I edited kill_warns.php: Code:
LEFT JOIN " . TABLE_PREFIX . "warningype wt ON(wt.warningtypeid = w.warned_warning_id) Code:
LEFT JOIN " . TABLE_PREFIX . "warningtype wt ON(wt.warningtypeid = w.warned_warning_id) Code:
AWS - Kill warnings Code:
$user = array_merge($user,convert_array_to_bits($user['options'],$vbulletin->bf_misc_useroptions)); |
Unless DelphiProgramming has changed the names of the tables, the name for the Warning Types table should be "warning_types".
If that's not the case, I would suggest you contact Delphi. As for the unvalid function call, at the top of the kill_warns.php file you have to see the following lines: Code:
require_once('./global.php'); That part of the code you quote (the one with convert_array_to_bits) doesn't exist in my code. |
All times are GMT. The time now is 03:06 PM. |
Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information | |
---|---|
|
|
![]() |
|
Template Usage:
Phrase Groups Available:
|
Included Files:
Hooks Called:
|