vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   Modification Graveyard (https://vborg.vbsupport.ru/forumdisplay.php?f=224)
-   -   Major Additions - vbBux / vbPlaza v1.5.8 (Points + Store System) (https://vborg.vbsupport.ru/showthread.php?t=106953)

caimakale 02-19-2006 09:02 PM

Quote:

Originally Posted by XanTrax
CMX_CMGSCCC - There obviously is an exploit if members on my board and apparently one or two other peoples boards here members can/are doing something to get 50,000 points in less then an hour or so.

Can you question the members who are doing this and find out how they are accomplishing it?

lordofgun 02-19-2006 09:13 PM

changeaways was a typo. do a thread search for it.

rinkrat 02-19-2006 09:14 PM

I just installed for the first time and I'm using ucash as the points system since I had that installed and users have lots built up.

I gave myself permission to use the store and went into the estor and saw all of the items including the bank and glow and all that but there is nowhere to click to purchase any of the items.

Also, where do I put the points into the bank?

GREAT mod by the way from what I've seen on other sites. Got my vote already :)

QueenBee 02-19-2006 09:15 PM

hey could someone help? i changed my name color. and it wont change back. any suggestions??

caimakale 02-19-2006 09:28 PM

Quote:

Originally Posted by QueenBee
hey could someone help? i changed my name color. and it wont change back. any suggestions??

Did you go back into the store where you bought it originally and remove it? You can always go to the AdminCP >> User area and delete it from your profile in there.

XanTrax 02-19-2006 09:28 PM

Quote:

Originally Posted by caimakale
Can you question the members who are doing this and find out how they are accomplishing it?


Ive asked them and they wont tell me so for now I have just created another usergroup and made it "Banned from eStore" so even if they exploit it they cant get all these points then distribute them. They wont tell me or anyone else and only 2 people know it but I would prefer that this exploit for getting points be checked out or something. My forums userbase is about 14-30 yrs of age mostly in the range of 16, 17, 18, 19, and 20 year old people that are pretty knowledgable in C++, Assembly, PHP, HTML, and other things that people of their age shouldnt know.

caimakale 02-19-2006 09:33 PM

Quote:

Originally Posted by rinkrat
I just installed for the first time and I'm using ucash as the points system since I had that installed and users have lots built up.

I gave myself permission to use the store and went into the estor and saw all of the items including the bank and glow and all that but there is nowhere to click to purchase any of the items.

Also, where do I put the points into the bank?

GREAT mod by the way from what I've seen on other sites. Got my vote already :)

What areas did you set to give yourself permission?

caimakale 02-19-2006 09:36 PM

Quote:

Originally Posted by XanTrax
Ive asked them and they wont tell me so for now I have just created another usergroup and made it "Banned from eStore" so even if they exploit it they cant get all these points then distribute them. They wont tell me or anyone else and only 2 people know it but I would prefer that this exploit for getting points be checked out or something. My forums userbase is about 14-30 yrs of age mostly in the range of 16, 17, 18, 19, and 20 year old people that are pretty knowledgable in C++, Assembly, PHP, HTML, and other things that people of their age shouldnt know.

It's kind of hard to fix an exploit that we don't know about. You don't have to set the usergroup thing, you can just go into their account and disable their access to the store.

First of all which version are you using? In 1.1.7 you can go into their user account in your admincp and disable their access to the store.

voleibolmurcia 02-19-2006 09:38 PM

CMX_CMGSCCC

Just modify the template edit for MEMBERINFO, its that easy. Where it says $gift[message] remove that part and fix it up to your liking.


The code to insert in memberinfo template is that:


PHP Code:

            <if condition="$vboptions['ebux_enabled']">
            <
div class="fieldset">
                <
table class="tborder" cellpadding="5" cellspacing="0" border="0" width="100%" align="center">
                <
thead>
                    <
tr align="center">
                        <
td class="thead"><a style="float:$stylevar[right]href="#top" onclick="return toggle_collapse('pointsmode')"><img id="collapseimg_pointsmode" src="$stylevar[imgdir_button]/collapse_thead$vbcollapse[collapseimg_pointsmode].gif" alt="" border="0" /></a>$vbphrase[ebux_name$vbphrase[ebux_points]</td>
                    </
tr>
                </
thead>
                <
tbody id="collapseobj_pointsmode" style="">
                    <
tr>
                        <
td class="alt1">
                            <
div><a href="estore.php?do=donate&amp;userid=$userinfo[userid]">$vbphrase[ebux_points]</a>: $userinfo[points]</div>
                            <
div>$vbphrase[ebux_bank]: $userinfo[bank]</div>
                            <
div>$vbphrase[ebux_total_points]: $userinfo[totalpoints]</div>
                        </
td>
                    </
tr>
                </
tbody>
                </
table>
            </
div>
            </if>
            
            <if 
condition="$show['gifts']">
            <
div class="fieldset">
                <
table class="tborder" cellpadding="5" cellspacing="0" border="0" width="100%" align="center">
                <
thead>
                    <
tr align="center">
                        <
td class="thead" colspan="4"><a style="float:$stylevar[right]href="#top" onclick="return toggle_collapse('usergiftsmode')"><img id="collapseimg_usergiftsmode" src="$stylevar[imgdir_button]/collapse_thead$vbcollapse[collapseimg_usergiftsmode].gif" alt="" border="0" /></a>$vbphrase[estore_gifts]</td>
                    </
tr>
                </
thead>
                <
tbody id="collapseobj_usergiftsmode" style="">
                    <
tr>
                        <
td class="tcat"></td>
                        <
td class="tcat">$vbphrase[estore_sender]</td>
                        <
td class="tcat">$vbphrase[estore_message]</td>
                        <
td class="tcat"><if condition="$show['candelete']">$vbphrase[estore_delete]</if></td>
                    </
tr>
                    
$userinfo[gifts]
                </
tbody>
                </
table>
            </
div>
            </if> 

I didnt found any $gift[message].

I dont understad the 99% of php code. I think the "trick" is in the $userinfo[gifts] that may be the phrase o whatever that shows the image, sender and messagge.

I only want to show the image.

Thank u.

QueenBee 02-19-2006 09:40 PM

Quote:

Originally Posted by caimakale
Did you go back into the store where you bought it originally and remove it? You can always go to the AdminCP >> User area and delete it from your profile in there.


it worked. thanks:)


All times are GMT. The time now is 02:11 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04467 seconds
  • Memory Usage 1,789KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_php_printable
  • (6)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (6)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete