vb.org Archive - Private Messages Enhancements - PMCrypt

Page 2 of 3

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 3.6 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=194)

- - Private Messages Enhancements - PMCrypt - Private Message Encryption (https://vborg.vbsupport.ru/showthread.php?t=140064)

magnus

07-13-2007 11:16 AM

Quote:

Originally Posted by Mrdby (Post 1289874)

anybody else?

:confused:

cclaerhout

08-31-2007 07:49 AM

There is a bug with this product and vBulletin infraction system. When you want to give user some penality points, here is the message :

""please complete both the subject and message fields."

When you desactivate this hack, it works.

cclaerhout

08-31-2007 08:01 AM

Here is a patched version

Warning : once product installed, never delete it otherwise you won't be able to read your pm anymore. Just UPDATE it (there's no problem to do that).

wIrEs

08-31-2007 08:12 AM

why never delete it? is it hard to code an Admin CP option to decrypt ALL messages before deleting this mod ?? over even, decrypt all messages before upgrading for a new version just in case something goes wrong ?, and let's say, also add a PM checkbox to let the user encrypt the message if they want...this is for encrypting sensitive information or if you're going to just say hi to somebody encrypting that kind of messages is pointless in my opinion, anyway cool mod overall but was expecting some more Unhackable' idea. I will use it anyway since before the messages can be cracked, a cracker needs to crack my database LOL.

cclaerhout

08-31-2007 08:22 AM

Well i'm not the coder, but this hack is very usefull when there are several admin and you want to be sure none of them will connect the DB to read PMs. By the way, your idea to decrypt all messages before deleting this mod is really good.

sub_ubi

03-19-2008 10:54 AM

Anyone have this running on 3.7?

codershark

03-19-2008 12:25 PM

works perfect on vb 3.7 Beta 6

DssCrazy

03-19-2008 10:17 PM

Problems

does not work with pm preview.

Does not work with infractions. thanks to cclaerhout it now does.

Does not Encryption the auto welcome message for new sign ups.

If user have their account setup to send to email it will show the Encryption.

Other than that this is WICKED.

Can you fix?

Thanks.

Martell

03-20-2008 02:53 AM

Does not work vB 3.6.8 PL2.:confused:

Can you fix?

Thanks.

DssCrazy

03-22-2008 08:20 PM

when is this coming out of beta stage?

codershark

04-02-2008 07:40 PM

Dont works in vbulletin 3.7 RC1 --> after Install all mods and admins cant warning users for a thread

DssCrazy

04-10-2008 03:56 PM

When sending mass pm's to all users the messages are not encry also i also when you have email pms option on it takes longers amount of time to sned to the email it is not instant anymore.

also the message that get encryped you can see in emails when it sends.

kellyandmark04

04-15-2008 05:41 AM

any updates on this as I see this as a big security issue if users update this with there current vbulletin and it is not working and they are using it thinking the PM's are secure

If it is not supported with a format of vbulletin it should be stated

logicuk

04-30-2008 03:21 PM

any updates coming? i would love this for vb 3.7

ShiZoPhreN

05-03-2008 01:31 AM

Hello

Please magnus, make the Plugin for vB 3.7 ready, its a nice Plugin, do not will miss in my vB 3.7

codershark

05-13-2008 12:02 PM

will someone update it to 3.7 ???

thestaton

05-14-2008 01:31 PM

Please update?

nikki712

05-23-2008 10:16 PM

I would love to add this to my forum as well. I'll be keeping an eye out for a 3.7 update! :)

ShiZoPhreN

05-26-2008 05:45 AM

Hello magnus,

Please update the Hack, in my old forum i use this Plugin, all user PN's are crypted, when i upgrade to 3.7 and its no update for this hack, all my users lost our PN's thats so bad.. :'(

mfg

Shizo

Hostboard

05-26-2008 05:53 AM

Besides the above mentions I would love for a way to make this by user group.

Fraxter

05-26-2008 09:12 PM

Quote:

Originally Posted by ShiZoPhreN (Post 1531527)

Use my attachment to encrypt your pm?s. I hope you haven?t uninstall the pmencrypt product, then you have no chance to encrypt the pm?s.

If you have only deactivated the hack, you set the sql settings in my script and run the sript. The script will encrypt all pn?s to the right format. I think it?s better if you test it first on a test board. :) For me is the script working perfectly. ;)

But make before a database backup from your pmtext table!!!

ShiZoPhreN

05-27-2008 05:26 AM

Quote:

Originally Posted by Pander23 (Post 1532241)

Thankx :) for your help Pander23 =) i will check your Script...

logicuk

05-31-2008 08:13 PM

any updates? i would love this for vb 3.7

logicuk

06-08-2008 07:13 AM

anyone?

rskg4

07-07-2008 09:05 AM

Quote:

Originally Posted by logicuk (Post 1543854)

anyone?

I'm using it on 3.7, it seems to be working fine

codershark

10-10-2008 01:34 PM

dont function under 3.7.3 PL1

Following mistake when I will open a message...

Quote:

Fatal error: Call to a member function query_first_slave() on a non-object in C:\xampp\htdocs\includes\functions_newpost.php(185 7) : eval()'d code on line 5

logicuk

10-10-2008 02:04 PM

This should be included in vb by default

Hope there is an update for this addon

kevbentz

01-10-2009 09:43 PM

This was functioning for me right up through 3.7.4 but when I upgraded to 3.8.0 it no longer works.

Pander23.... I've been toying with your script, but it won't update the database because of apostrophes (') . They break the sql query if not escaped.

kevbentz

01-11-2009 09:26 PM

Okay, I've got this "functioning" enough to decrypt PM's again, but am getting this error:

Parse error: syntax error, unexpected ';' in /public_html/includes/functions_newpost.php(1881) : eval()'d code on line 3

and it doesn't matter if the PM's are encrytped or not (I'm using some test PM's that are not encrypted to test functionality).

This highlighted section is the part of the code I'm having a problem with (this is from the .xml file for this add-in). If I remove the ";" at the end of the line it works for unencrypted PM's but not for encrypted PM's. If I leave it there, I get the error stated above:

Code:

<plugin active="1" executionorder="5">

                        <title>PMCrypt :: Decrypt an encrypted reply</title>

                        <hookname>private_newpm_reply</hookname>

                        <phpcode><![CDATA[if ($pm['encrypt']){

                        unset($pm);

                        if ($pm = $db->query_first_slave("SELECT pm.*, pmtext.* FROM `" . TABLE_PREFIX . "pm` AS pm LEFT JOIN `" . TABLE_PREFIX . "pmtext` AS pmtext ON(`pmtext.pmtextid` = pm.pmtextid) WHERE `pm.userid` = '" . $vbulletin->userinfo['userid'] . "' AND `pm.pmid` = '" . $vbulletin->GPC['pmid'] . "'";)){

                                // quote reply

                                $originalposter = fetch_quote_username($pm['fromusername']);

                                $pm['message'] = encrypt_decrypt(base64_decode($pm['message']));

                                // allow quotes to remain with an optional request variable

                                // this will fix a problem with forwarded PMs and replying to them

                                if ($vbulletin->GPC['stripquote']){

                                        $pagetext = strip_quotes($pm['message']);

                                }

                                else{

                                        // this is now the default behavior -- leave quotes, like vB2

                                        $pagetext = $pm['message'];

                                }

                                $pagetext = trim(htmlspecialchars_uni($pagetext));

                                eval('$pm[\'message\'] = "' . fetch_template('newpost_quote', 0, false) . '";');

                                // work out FW / RE bits

                                if (preg_match('#^' . preg_quote($vbphrase['forward_prefix'], '#') . '#i', $pm['title'])){

                                        $pm['title'] = substr($pm['title'], strlen($vbphrase['forward_prefix']) + 1);

                                }

                                elseif (preg_match('#^' . preg_quote($vbphrase['reply_prefix'], '#') . '#i', $pm['title'])){

                                        $pm['title'] = substr($pm['title'], strlen($vbphrase['reply_prefix']) +1);

                                }

                                else{

                                        $pm['title'] = preg_replace('#^[a-z]{2}:#i', '', $pm['title']);

                                }

                                $pm['title'] = trim($pm['title']);

                                if ($vbulletin->GPC['forward']){

                                        $pm['title'] = $vbphrase['forward_prefix'] . " $pm[title]";

                                        $pm['recipients'] = '';

                                        $pm['forward'] = 1;

                                }

                                else{

                                        $pm['title'] = $vbphrase['reply_prefix'] . " $pm[title]";

                                        $pm['recipients'] = $pm['fromusername'] . ' ; ';

                                        $pm['forward'] = 0;

                                }

                        }

                }]]></phpcode>

                </plugin>

Any help?

kevbentz

01-13-2009 02:31 AM

More testing shows that when replying to a PM it will quote the encoded message, not the unencoded one.

So, looks like this is broken for 3.8, an possibly earlier (although this worked for me right up through 3.7.4).

I see the coder is still active here. Just wish he could update this.... (hint, hint):D

badham

05-28-2009 08:34 PM

I would love to have this back f0r 3.8.x, it does not work with it for sure.... I looked at the code but have not had time to hash out where the rub is, shame as this was a great security feature and would love to see the same for 3.8

badham

badham

09-06-2009 01:30 AM

To add i got it working with 3.8 by simply uninstalling it and reinstalling it. Of course it did not help with those who had pm's which became encrypted and could not be read by the system, but all new pms are encrypted and decrypting as they should.... this is a good hack... would love to see someone do this for the entire vbulletin forum. Would be great for us who are security minded.

badham

pete838

12-22-2009 12:42 PM

I am interested in encrypting PM's inside the database to prevent something like this from exposing my members private messages. Is there any plan to update this mod for vB4?

wIrEs

04-24-2010 10:40 PM

please update to vb4.0.3 !

gameplanets

05-30-2010 02:53 PM

Great mod, can you pdate at least to vB 3.8?

cclaerhout

07-17-2010 09:11 AM

Here is a fix working for me on vB 3.8.6.

Better to say it again : UPDATE your previous version with this one. DO NOT uninstall your previous version !

If someone finds a way to DECRYPT ALL the PM database, then it will be a pleasure for me to UNINSTALL this hack.

gameplanets

07-26-2010 10:11 PM

Thank you cclaerhout! Works on 3.8.6!

cclaerhout

01-30-2011 09:43 PM

Here is a PHP script to "decrypt" all the encrypted pm in the database.

Before using it, YOU HAVE TO SAVE YOUR "pmtext" TABLE.
To do it, go to PHPMYADMIN

If the script doesn't work for you, you will be able to restore your table

Then open "decrypt_pm.php", and add information to connect to your server. Save the file. Upload it to your server. Launch it with your browser.

You can now upgrade to vB 4 or whatever.

This script is not supported

mandrinvborg

08-26-2011 07:56 AM

Does this mod work with VB 3.8.4?

cclaerhout

08-26-2011 01:27 PM

Yes but do not install this hack. For explanation, just read the thread.

All times are GMT. The time now is 01:33 PM.

Page 2 of 3

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.02447 seconds Memory Usage 1,829KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_code_printable (5)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (2)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (40)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: