vb.org Archive - Security Password for Admincp Hacks

Page 2 of 5

Last »

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 3.0 Beta Releases (https://vborg.vbsupport.ru/forumdisplay.php?f=34)

- - Security Password for Admincp Hacks (https://vborg.vbsupport.ru/showthread.php?t=70412)

yukayumi

10-10-2004 08:54 PM

Really don't remember if I had made any changes to this file before.It's supposed to be there like in your screenshot but mine is different.Please take a look and tell me what to do.Should I hit the back button and uninstall this script? I'm afraid I won't be able to login my admincp if get stuck in the middle of the installation here.

PitchouneN64ngc

10-10-2004 08:57 PM

What is your version of vBulletin you using? For vB 3.0.3, all is good :)

AnhTuanCool

10-10-2004 09:03 PM

To yukayumi -

Replace your lines from 156 to 158 with:

PHP Code:


		
			
    if ($bbuserinfo = $DB_site->query_first("SELECT userid, usergroupid, membergroupids, username, password, cpanelpassword, salt FROM " . TABLE_PREFIX . "user WHERE username = '" . addslashes(htmlspecialchars_uni($username)) . "'"))

    {

        if (

            $bbuserinfo['password'] != iif($password AND !$md5password, md5(md5($password) . $bbuserinfo['salt']), '') AND

            $bbuserinfo['password'] != md5($md5password . $bbuserinfo['salt']) AND

            $bbuserinfo['password'] != iif($md5password_utf, md5($md5password_utf . $bbuserinfo['salt']), '') OR

            $bbuserinfo['cpanelpassword'] != md5(md5($password2))

        )

Good luck ;)

yukayumi

10-10-2004 09:23 PM

Mine is vbb 3.0.1,maybe that's why there's alot of error out there.Could not find the code between those  in my adminfunctions.php file.I guess it's not compatible with 3.0.1 though.What should I do?

AnhTuanCool

10-10-2004 09:30 PM

In adminfunctions.php, SELECT BETWEEN the two  and  line, and do the replacement, good luck :)

yukayumi

10-10-2004 09:51 PM

Could you please take a look at my functions_login.php file? It's 3.0.1 and I could not find the code mentioned in your hack.Thanks.

AnhTuanCool

10-10-2004 09:57 PM

Cross out that modification for functions_login.php and do the first two support that I gave (if you didn't) cause there is no verify_authenticate function ;).

yukayumi

10-10-2004 10:43 PM

Work like charm,AnhTuanCool.Thanks alot.This hack is great!

Floris

10-11-2004 07:38 AM

Personally I think this is useless because there is also .htaccess which is better.
The biggest threats are xss where they don't even need to know the passwords. This would be a handy additional security layer for windows servers where .htaccess isn't working. And every additional security layer is better then not having it. So thank you for your hack and sharing it.

Carter876

10-11-2004 07:47 AM

I'm on Linux server and I prefer to use .Htaccess but this hack is good for Windows server :)

Regards

All times are GMT. The time now is 07:02 AM.

Page 2 of 5

Last »

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01282 seconds Memory Usage 1,735KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_php_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (3)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: