I was really interested in using this mod, but I don't feel comfortable having a directory with PHP files in it that is CHMODed to 777. This smells of a security hole as anyone can modify those PHP files to display sensitive information. Is there a specific reason for vbactivity_type to be wide open?

Yeah, the fact that when you add a new button, it needs to write a new file to that directory to be compatible with vBActivity :)


Fillip

Thank you for all of your efforts. This seems like a great product.


I am also concerned about security. My site was recently exploited through the Post Thank You plugin by Abe1. A shell script was inserted into the ajax_complete.php.

I'm honestly not fluent enough to ask the right questions here, but have you had any experience with this product being similarly exploited? I'd really love to have a Thanks option again (members of my forum are begging for it) but not if it's going to leave me vulnerable to attack.

Thank you!

There have been no reports of this mod being the source of any exploits.

Keep in mind that a directory being 777 doesn't mean anyone can inject scripts into it from any server - the attacker needs some form of access to your server via other means (either an Admin account with Can Admin Plugins) or another account on the server.

That still doesn't mean anyone else on a shared server can hack your site - there's still open_basedir restrictions which any shared host worth their salt would have enabled.

Fillip

Dear Fillip is there a possibility to add option to hide posts that have specific number of dislikes?

That's a Pro only feature: "Ability to auto-collapse posts using provided formula or input for your own using your custom buttons" :)


Fillip

This is still happening, or at least it was on my own site until I removed the edit to /vb/legacy/post.php as stated by Sidewindr.

Is this going to be fixed?

Were do I edit?
{vb:raw stat}

Need to edit the code whatever is being pulled through this variable.

That variable is defined in /dbtech/thanks/hooks/postbit_display_complete.php


Fillip

Hello Dragon Byte,

I installed your plugin ... It looks good but I do not know how to thank or like someone ... how can I do this??

Greetings:

http://www.hyperlinkbuilding.org/thr...-Compte-Newbie

Currently your website is down: https://www.dragonbyte-tech.com/

How long will it itake to bring it back to life??