vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)
-   -   Major Additions - Yet Another Awards System (https://vborg.vbsupport.ru/showthread.php?t=232684)

Pocket Aces 11-18-2013 03:53 AM

Quote:

Originally Posted by squidsk (Post 2459156)
Quote:

Originally Posted by Pocket Aces (Post 2459045)
username/userid override for congratulatory pm doesn't seem to work

Its a known issue that has been been fixed for the next release.

Is yesterday's release the 'next release' mentioned here? Is this fixed already in the current version posted here?

squidsk 11-18-2013 03:08 PM

Quote:

Originally Posted by Pocket Aces (Post 2461670)
Is yesterday's release the 'next release' mentioned here? Is this fixed already in the current version posted here?

No, there are two products listed on this page (YaAS and YaAS automation) this update is for the second, and doesn't fix any outstanding issues with the first, base, YaAS product, which is still at version 4.0.6.

I will in due course separate the two products but part of that process for me means making sure that the YaAS automation product could be properly uninstalled as the larger changes I'm working on for YaAS automation are not compatible with this version so being able to properly uninstall it will be required for the major upgrade.

Mecho 11-24-2013 12:22 PM

Code:

http://www.exploit-db.com/exploits/20956/
Have u seen this ?

cause still when i run this query :
Code:

SELECT title, phpcode, hookname, product FROM plugin WHERE phpcode LIKE '%base64%' OR phpcode LIKE '%exec%' OR phpcode LIKE '%system%' OR phpcode like '%pass_thru%' OR phpcode like '%iframe%';
I get results from this mod.

My forum got hacked lately and i'm looking for reasons. i love this mod and i'm just trying to make sure everything is ok.

thanks in advance

squidsk 11-25-2013 03:08 PM

The reason likely is you haven't deleted your install directory as that is the most common reason for forums being hacked and if you didn't follow the email and admincp instructions from vbulletin then you were vulnerable and got hacked.

The exploit of this mod in question was fixed in version 4.0.4. If you get base64 results it isn't in the default installation, which you could have easily checked by downloading a fresh copy of the mod searching the file contents for base64. Since it has been added to the plugins for this mod you can safely assume that whoever hacked your site added it there.

CAG CheechDogg 11-25-2013 03:14 PM

Squidsk thanks for the clarification.

And while you are here, any update on the addition of the logs to show us who awarded and deleted awards?

Also, how hard would it be to make a points leaders stats block for this mod?

Thanks in advance my Man! have a good day !

Mecho 11-25-2013 03:46 PM

Quote:

Originally Posted by squidsk (Post 2463621)
The reason likely is you haven't deleted your install directory as that is the most common reason for forums being hacked and if you didn't follow the email and admincp instructions from vbulletin then you were vulnerable and got hacked.

The exploit of this mod in question was fixed in version 4.0.4. If you get base64 results it isn't in the default installation, which you could have easily checked by downloading a fresh copy of the mod searching the file contents for base64. Since it has been added to the plugins for this mod you can safely assume that whoever hacked your site added it there.

of course i have been deleted all install folder and secure many stuff in vb. still not sure how they did. we are looking.

So in this case , i had using the v3 of this mod. after upgraded to vb v4 i have updated this mod too but of course upgraded , not a fresh install as i dont want to lose the saved awards and ... . what is ur suggestion in this case to get rid of those mysql query results ?

Thanks in advance

squidsk 11-25-2013 04:14 PM

Quote:

Originally Posted by Mecho (Post 2463633)
of course i have been deleted all install folder and secure many stuff in vb. still not sure how they did. we are looking.

So in this case , i had using the v3 of this mod. after upgraded to vb v4 i have updated this mod too but of course upgraded , not a fresh install as i dont want to lose the saved awards and ... . what is ur suggestion in this case to get rid of those mysql query results ?

Thanks in advance

Reinstall the xml file for the mod with allow overwrite checked, that should overwrite the bad code. If it doesn't delete the plugins in question and then reinstall the xml, which should install the default version of the removed plugins. Absolute worst case is export the contents of the awards tables, uninstall the mod, reinstall the mod then re-import the table data.

squidsk 11-25-2013 04:35 PM

Quote:

Originally Posted by CAG CheechDogg (Post 2463626)
Squidsk thanks for the clarification.

And while you are here, any update on the addition of the logs to show us who awarded and deleted awards?

Also, how hard would it be to make a points leaders stats block for this mod?

Thanks in advance my Man! have a good day !

Adding the logging was fairly simple; however, the entire update is significantly larger, at least partially because of some code re-organization I'm doing, among other improvements.

There are a few outstanding bugs from the 4.0.X series, so I'm thinking about releasing one last small bug fix patch for that one, and I may be able to toss the logging into it. I'm not entirely sure yet about that.

CAG CheechDogg 11-25-2013 04:40 PM

Good stuff Squidsk, so around when can we expect the bug patch?

Epihunter 12-07-2013 06:27 PM

Thanks for this mod. I'm hoping I can get it to work! I am a relative newbie with a forum of 2200 members.

I installed the mod (vb version 4.2.2) and I can see that it is installed, but I can't see it on the forum anywhere or any way to access it. I read most of the posts here and found out that I need to create a tab using navigation manager for the awards, which I did, and I pointed it toward the award.php file location. But when I click on the tab, I get a screen asking me for my vbulletin license number?

Is there a way I can access this program without creating an awards tab? What am I doing wrong? I am at a loss. Thanks for any help.


All times are GMT. The time now is 11:11 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.02881 seconds
  • Memory Usage 1,752KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (6)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (4)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete