vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   Modification Graveyard (https://vborg.vbsupport.ru/forumdisplay.php?f=224)
-   -   Forum Display Enhancements - Multi Domain Login (https://vborg.vbsupport.ru/showthread.php?t=221026)

Setokaiba (SW) 10-05-2009 11:30 PM

Be careful, this mod allowed to enter any forum account without knowing the password, even logged in to the account of one of my managers and some members banned, so that the damage was not greater.

Paul M 10-06-2009 10:36 AM

If you can demonstrate this then please PM details to the staff here so we can check it, Thanks.

Floris 10-06-2009 12:18 PM

Nice mod, but waiting until proven if it is exploitable or not.

That said, the phrase has a small typo: automaticly

automatically <- corrected. :p VROEM!

Jhonnydc 10-07-2009 08:05 AM

i have this problem when i install the product:

Warning: parse_url() expects exactly 1 parameter, 2 given in [path]/includes/init.php(298) : eval()'d code on line 3

Adult SEO 10-08-2009 09:30 AM

@ Setokaiba (SW)

Can you please let me know how you were able to login to any account with this mod? The temporary login key that is generated is unique for every user. It should be at least as secure as any normal password.

Jhonnydc 10-08-2009 12:56 PM

Quote:

Originally Posted by Jhonnydc (Post 1896031)
i have this problem when i install the product:

Warning: parse_url() expects exactly 1 parameter, 2 given in [path]/includes/init.php(298) : eval()'d code on line 3

the forum is locked too....

Now it's disinstalled... i wait an answer... ;)

Adult SEO 10-08-2009 02:33 PM

I now see the second parameter of parse_url() was added in PHP 5.1.2.

http://www.php.net/manual/en/function.parse-url.php

I will revise this script probably tomorrow for use on one of my own forums, and update this mod with a version that should be compatible with PHP 4.

ViewMy.biz 10-08-2009 11:44 PM

I need this feature

I was hoping approved "white space" would allow logging in from different domains

Floris 10-10-2009 10:45 AM

A shame, people jump to false accusations with no data to back their claim up.

C'mon, show that it's exploitable, or apologize for being wrong.

fattony69 10-13-2009 03:11 AM

Quote:

Originally Posted by Floris (Post 1897510)
A shame, people jump to false accusations with no data to back their claim up.

C'mon, show that it's exploitable, or apologize for being wrong.

Correct me if I am wrong, but I believe the issue that was brought up wasn't a problem with this modification, but with vbulletin itself and the release that was put out a few days ago.


All times are GMT. The time now is 07:09 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01029 seconds
  • Memory Usage 1,730KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete