vb.org Archive - Major Additions - vbBux / vbPlaza v1.5.8 (Points + Store System)

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- Modification Graveyard (https://vborg.vbsupport.ru/forumdisplay.php?f=224)

- - Major Additions - vbBux / vbPlaza v1.5.8 (Points + Store System) (https://vborg.vbsupport.ru/showthread.php?t=106953)

Quote:

Originally Posted by dan35

Mysql: 4.0.26
php: 4.4.2

Manage Lotteries

Code:

Database error in vBulletin 3.5.3:



Invalid SQL:



                                UPDATE estorelottery

                                SET

                                        ticketcost = '200',

                                        jackpot = '2000.00000',

                                        winningtax = '10.00000',

                                        ticketssold = '0',

                                        active = '0',

                                WHERE lotteryid = '1';



MySQL Error  : You have an error in your SQL syntax.  Check the manual that corresponds to your MySQL server version for the right syntax to use near 'WHERE lotteryid = '1'' at line 8

Error Number : 1064

Date         : Wednesday, February 22nd 2006 @ 08:35:19 PM

Script       : http://www.domain.com/forums/admincp/elottery.php

Referrer     : http://www.domain.com/forums/admincp/elottery.php?do=lotterylist

IP Address   : xx.xx.xx.xx

Username     : xxx

Classname    : vb_database

i'm getting the same error

Quote:

1) Points per Character - I'm sure this has already been brought up, but if you give points per character in a post, users can just post a large amount of characters (copy and paste), post, and then edit it out before anyone sees.

i think this should be taken out. if you give even 1 point per character you will have literally hundreds of thousands of points for loyal members or staff.

by post is great if you do it by character that is just to much in my opinion but hey some people want to do it that way.

Quote:

2) Points per Thread View - Some users of my forum (not even a day after I put up the eStore), have created scripts to simply view a thread repeatedly, thus not only increasing their points rapidly, but also creating a DDoS attack to the server (since they also shared the script with their friends)

this should be corrected imediatelty and those members should be IP banned.

Quote:

3) untested.. Points for Birthday - I have yet to test this, but if you set your birthday to the *next* day, and then when that day comes, you change the birthday again to the *next* day, so free points everyday

im going to test this as well.

Quote:

4) Points for Registration/Referral - of course if somebody is so inclined they could create a lot of accounts using a person as the referrer and mass up points this way.

Ban these members. the AE detector will help. i have caugth several members doing this and rules on my forum are no 2 usernames.

Currently I have disabled all the points except for from posts since that is the easiest/only way to see how people are getting their points (except from stealing).

And what's the AE detector? O_o

Edit: n/m found it -> https://vborg.vbsupport.ru/showthrea...ht=AE+detector

I upgraded to v1.1.9 in hopes of fixing the lottery issues I was having. The upgrade went fine and everything appeared normal. However, users cannot open and view a threads. Neither can the administrator account.

The index and home pages appear normal but when clicking on a thread a new page opens, but it is completely blank. Its as if permissions to view a post have been affected. I've checked all forum and usergroup permissions and everything appears normal.

I could not find a setting in the estore options that probibited viewing a post but it appears one is somewhere. Please help. :ermm:

@ChiliVB the same here,and i thought it was just my server playing up

Quote:

Originally Posted by Rickie3

@ChiliVB the same here,and i thought it was just my server playing up

Thanks for posting Rickie3, I thought I was losing my mind!

I found an entry called showthread_start in the Plugin Manager. But I can't tell if there are any problems with it. I guess we will have to wait til CMX sees our post.

Could you add confirm on all delete/rebuild options please?

Quote:

Originally Posted by LadyJo

does the upgrade fix the fatal error my members are getting when sending gifts???

and does this fix the bug that resets my option settings to default after I save???

It should, the one having to do with PM's I assume u r referring to.

Quote:

Originally Posted by Rickie3

@CMX_CMGSCCC

where do i find estore_history please?

It's inside of the user table, use PhpMyAdmin to get the exact value for the user id that is causing the issue.

Quote:

Originally Posted by Robert9

Hi, I want to points given out per forum (minus the multiplyer if necessary) to display dynamically. Any way you could do this easily? Thanks!

Just put something in the templates like $foruminfo[ebux_perthread], etc..

Quote:

Originally Posted by lordofgun

YAY!!! Ability to give unlimited Reputation just like admins can too? :D

[high]* lordofgun prays.[/high]

Maybe..... ;p

Quote:

Originally Posted by lowandloudinc

hey CMX,

how do i change the name of the store? im talking about the link in the nav bar. it says estore munu. ide like to call it something related to my site if possible.

2 phrases....... estore_name, and estore_menu

Quote:

Originally Posted by dan35

Mysql: 4.0.26
php: 4.4.2

Manage Lotteries

Code:

Database error in vBulletin 3.5.3:



Invalid SQL:



                                UPDATE estorelottery

                                SET

                                        ticketcost = '200',

                                        jackpot = '2000.00000',

                                        winningtax = '10.00000',

                                        ticketssold = '0',

                                        active = '0',

                                WHERE lotteryid = '1';



MySQL Error  : You have an error in your SQL syntax.  Check the manual that corresponds to your MySQL server version for the right syntax to use near 'WHERE lotteryid = '1'' at line 8

Error Number : 1064

Date         : Wednesday, February 22nd 2006 @ 08:35:19 PM

Script       : http://www.domain.com/forums/admincp/elottery.php

Referrer     : http://www.domain.com/forums/admincp/elottery.php?do=lotterylist

IP Address   : xx.xx.xx.xx

Username     : xxx

Classname    : vb_database

Ooops, temporary fix:

in /admincp/elottery.php

Find:

Code:

active = '" . $_POST['active']["$lottery[lotteryid]"] . "',

Replace With:

Code:

active = '" . $_POST['active']["$lottery[lotteryid]"] . "'

Quote:

Originally Posted by randominity

Hi, my users have found a few exploits already...

1) Points per Character - I'm sure this has already been brought up, but if you give points per character in a post, users can just post a large amount of characters (copy and paste), post, and then edit it out before anyone sees.

2) Points per Thread View - Some users of my forum (not even a day after I put up the eStore), have created scripts to simply view a thread repeatedly, thus not only increasing their points rapidly, but also creating a DDoS attack to the server (since they also shared the script with their friends)

3) untested.. Points for Birthday - I have yet to test this, but if you set your birthday to the *next* day, and then when that day comes, you change the birthday again to the *next* day, so free points everyday

4) Points for Registration/Referral - of course if somebody is so inclined they could create a lot of accounts using a person as the referrer and mass up points this way.

Great work on the script thus far, but these are just some ways that it can be "exploited."

1) Then disable the Points Per Character by putting a 0 for this setting.

2) Same principle, for the Multiplier for Thread View, put a 0 there and there will be no points awarded for thread views.

3) This is not an issue, it saves an extra field in the user table saying when they last received a birthday present and if it hasnt been at least 364 days, it will not give them the points.

4) Sure, but its up to u to check for accounts using the same IP and ban them :) You could always enter a 0 for this setting too :)

Quote:

Originally Posted by RDX1

Could you add confirm on all delete/rebuild options please?

There will be confirm on the lottery and category delete options in the future, but rebuild datastore does not need a confirm as it should always be useful no matter what and build the proper data.

Quote:

Originally Posted by ChiliVB

I cant replicate this problem at http://www.ps2hits.com/forums/

Perhaps I could investigate it further if given a login to ur forums with admin and can administer plugins one evening?

-CMX

Quote:

Originally Posted by CMX_CMGSCCC

I cant replicate this problem at http://www.ps2hits.com/forums/

Perhaps I could investigate it further if given a login to ur forums with admin and can administer plugins one evening?

-CMX

CMX, my forums are unusable right now, not posts can be viewed and I don't know what to do to fix the problem. I have even disabled eBux in the Plugin Manager to see if that would allow a post to be read. I'll send you a PM and see how we need to proceed.

i cant for the life of me find this code in elottery.php v1.1.9
active = '" . $_POST['active']["$lottery[lotteryid]"] . "'
-------------------------------------------------------------------
"EDIT" i found it,stupid me was looking at elottery.php v1.1.8 "DOH"

X vBulletin 3.8.12 by vBS Debug Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (4)bbcode_code_printable (16)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (6)pagenav_pagelinkrel (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages:

Phrase Groups Available:

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.07723 seconds Memory Usage 1,779KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (4)bbcode_code_printable (16)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (6)pagenav_pagelinkrel (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: