vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.6 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=194)
-   -   Administrative and Maintenance Tools - Security Token Notification (https://vborg.vbsupport.ru/showthread.php?t=177017)

Andreas 04-24-2008 03:35 PM

Works just fine for me

Barakat 04-24-2008 06:18 PM

Quote:

Originally Posted by Boofo (Post 1498256)
What did you change in it? </templates> is still there.

in his original xml there were

<templates>
</templates>
</templates>

one of them have no need to be there. i believe he just fix it ,

mihai11 04-24-2008 06:54 PM

Can somebody explain to me in more detail what this hack does ? First of all, what is a "security token" ?

Regards,
Razvan

Dannyloski 04-24-2008 07:15 PM

OMFG! Thank you for this, with 3.6.10 and the fact that some Modifications wont work because of the new Security Token, now I can rest in peace to know which one those are when they are accessed ... :up: on a great Mod ...

Mike-D 04-24-2008 09:59 PM

Quote:

Originally Posted by mihai11 (Post 1498452)
First of all, what is a "security token" ?

Security Tokens are small Hardware Devices that owners carries to authorize access to a Network Service. That means: Security Tokens provide an extra level of assurance thru a method known as TFA (Two-Factor Authentication). In this case the user has a PIN (Personal Identification Number which authorizes them as the owner of that particular device. So the device then shows a number which uniquely identifies the user to the service and allowing them to log in. The identification number for each user is changed frequently, usually every 3 min's. See also Wikipedia :)

Boofo 04-24-2008 10:09 PM

Good explanation, Mike, but I think they want to know how it applies to vBulletin now. ;)

Mike-D 04-24-2008 10:09 PM

Quote:

Originally Posted by mihai11 (Post 1498452)
Can somebody explain to me in more detail what this hack does ?

That what he wrotes...
Quote:

Originally Posted by Andreas
This simple mod logs security token erorrs to vBulletin PHP error log and optionally sends an E-Mail to the webmaster.

See also the Plugin called "Detect Security Token Failure". The most important is the $backtrace variable and the rest is pretty self explained :)

Konstantinos 04-24-2008 10:42 PM

so this will tell us which mod file needs to add define('CSRF_PROTECTION', true); immediately below define('THIS_SCRIPT', '... ???

steven s 04-24-2008 10:49 PM

Wouldn't this only be needed for v 3.6.10 and 3.7RC4?

Trana 04-25-2008 12:39 AM

Quote:

Originally Posted by Boofo (Post 1498606)
Good explanation, Mike, but I think they want to know how it applies to vBulletin now. ;)

OK, clearly something significant occurred to necessitate 3.6.10. Can you guys not be so cryptic for the rest of us who are not up on what is going on?

How does this affect 3.6.10? How does this affect installed mods?


All times are GMT. The time now is 01:48 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01260 seconds
  • Memory Usage 1,737KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (5)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete