vBPlaza ( the older version ) had an exploit that allowed any user access to full admin rights ( somehow ). You may believe that or not, but vBulletin.org had NO REASON to just make it up. The newer version however I have heard is fixed..who knows though as it still isn't released here.

I have never used vbplaza and I do not have enough knowledge to judge, but I would not install version 1.58. Everyone running it, should uninstall it.

I don' t think that it just has been banned from vb.org, just because the author wanted to charge for the hack. Vbplaza people seem to have admitted the security hole, so from my point of view there should not be any doubt on its existence. That you have not been hacked, does not mean that your site is safe. Even vbulletin needs to be updated from time to time, because new risks have been discovered, but not every site is updating.

Everyone in need of a point system should have a look at vbcredits or vbexperience. I think vbplaza has a lot more to offer, but those hacks should be good enough for most sites.

vbplaza was an awesome mod. I wish it would come back.

+1. v.1.5.8 really vulnerable. I have "tested" it on myself. :-(

If a modification is removed from vB.org because of vulnerabilities, then this is done after a vulnerability was reported by a member and confirmed by staff.

What you do with this information is up to you, but using a modification that is known to have exploits is not something i would advertise.

Link to vBPlaza v2 which the author has released?

<a href="http://www.vbplaza.com" target="_blank">http://www.vbplaza.com</a>

Here's the actual thread about the new release: http://www.vbplaza.com/forum/showthread.php?t=72

I'll admit, I'm totally confused about what works, and what points are used for now.

My members want 'gifts' and want them in a bad way, so if anyone can help me figure this out - much appreciated.

ry215, how did you fix the usergroup bug from vbplaza using 3.7? whenever you are updating the usergroup it always creating new usergroup based on the same usergroup.

I am trying to find out if it is the db scheme or something else. help :)

Any chance having this working with vbplaza 2?

Thanks