vb.org Archive - More Admin Security - Protect Templates, Templatesets and Styles!!!

Page 2 of 3

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 2.x Full Releases (https://vborg.vbsupport.ru/forumdisplay.php?f=4)

- - More Admin Security - Protect Templates, Templatesets and Styles!!! (https://vborg.vbsupport.ru/showthread.php?t=44764)

KelteN

04-18-2003 08:17 AM

Nice Hack :)

sonic3d

05-01-2003 02:10 PM

installed.

l8er
sonic

Logikos

05-12-2003 09:56 AM

If seperated bt commas it protects more correct? And same question for Total Admin Security? User IDs can be seperated by commas to protect other admins

Chris M

05-12-2003 10:11 AM

No you must expand the statement...

Explanation :

Normal code:

Code:

if(($styleid==X) and ($bbuserinfo[userid]!=Y)) {

    echo "<p>You cannot edit this Style!</p>";

    exit;

  }

Expanded code (to allow 2 users) :

Code:

if(($styleid==X) and ($bbuserinfo[userid]!=Y or $bbuserinfo[userid]!=Z)) {

    echo "<p>You cannot edit this Style!</p>";

    exit;

  }

Expanded code (to protect 2 styles) :

Code:

if(($styleid==X or $styleid==Z) and ($bbuserinfo[userid]!=Y)) {

    echo "<p>You cannot edit this Style!</p>";

    exit;

  }

Expanded code (to protect 2 styles and allow 2 users) :

Code:

if(($styleid==X or $styleid==W) and ($bbuserinfo[userid]!=Y or $bbuserinfo[userid]!=Z)) {

    echo "<p>You cannot edit this Style!</p>";

    exit;

  }

:)

Satan

Logikos

05-12-2003 10:20 AM

Thanks Man!!

Chris M

05-12-2003 10:44 AM

No problems;):)

Satan

-Sidekick-

05-30-2003 10:46 PM

Wouldn't it be easier to just restrict the primary actions to the userid of the board owners choice?

Chris M

05-31-2003 09:24 AM

@-Sidekick- - Perhaps, but this allows you let other admins add and edit their own styles, and not be able to edit your existing styles...

Satan

-Sidekick-

05-31-2003 11:15 PM

The reason I ask is cause I'm the only one messing with the Styles, Templates, & Replacements.

So just restricting the primary functions would be safe right? =]

Chris M

05-31-2003 11:25 PM

Well if you are the only one, simply restricting the entire file to just your userid is better;)

But, like me, if you have admins (in my case co-admins) editing styles, you want to ensure that your styles that you do not want deleting or being tampered with remain that way;):)

Satan

All times are GMT. The time now is 12:24 PM.

Page 2 of 3

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01853 seconds Memory Usage 1,726KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (4)bbcode_code_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (2)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: