vb.org Archive - PasswordHack for v2.2.1 English

Page 3 of 14

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 2.x Full Releases (https://vborg.vbsupport.ru/forumdisplay.php?f=4)

- - PasswordHack for v2.2.1 English (https://vborg.vbsupport.ru/showthread.php?t=32956)

nuno	12-07-2001 06:20 PM

hey cool hack
shouldnt newreply.php be hacked also? :eek:
*BUG* ;)

Afterburner

12-07-2001 06:25 PM

oh a hardcoder *g*
works only if you know the threadid and put it manually in the browserline, but thx for reporting, you know asap :D but at the moment to much beers *g*

nuno	12-07-2001 07:36 PM

oh :D
dont forget printthread.php ;)

YoMama

12-13-2001 10:50 AM

OK,

Maybe I'm missing something, but when I click on the "Go To Last post"-icon in the "Last Post" column on the main page, You can enter the forum without having to enter a password.

Did I miss out on something or is this a bug?

- YoMama

Bedhead

12-13-2001 10:51 PM

Are you logging out and logging back in as a different user?

This hack will only ask for the password once, unless you change it, then it cookies to your username.

A great hack indeed.

Thanks again!

YoMama

12-14-2001 07:03 AM

What I do is:

1. Login
2. Enter password for protected forum
3. Log out
4. In the main forum click on go to last post of protected forum

And I'm in, while I shouldn't...

- YoMama

Afterburner

12-14-2001 07:18 AM

confused
normally this is inpossible, the access for the protected boards are saved in your database not in Cookis.
Do you have enabled guests to view the forum ? if yes disable it for guests.

Afterburner

12-14-2001 07:23 AM

I tested it and it worked correctly:
http://216.40.240.19/vbulletin/showt...ost&forumid=30

YoMama

12-14-2001 10:51 AM

Weird. Mine is still warped...

Check out forums.supaspiffy.com

Try to access the [MOB] Private forums as one would normally (which will prompt for a password like it should)
Then go back to the Forum home, and click on the 'Goto last post button' in the 'last Post' column. This will bring you in the forums without having to enter a password. You need to register first (I disabled guest access as you said)

Regards,

- YoMama

Afterburner

12-14-2001 11:03 AM

I see your problem, have you modified the showtopic.php ?

you had to look for:

PHP Code:


		
			
$threadid = intval($threadid);

$thread = verifyid("thread",$threadid,1,1);



if ($wordwrap!=0) {

  $thread['title']=dowordwrap($thread['title']);

}



if (!$thread['visible']) {

  $idname="thread";

  eval("standarderror(\"".gettemplate("error_invalidid")."\");");

  exit;

}



$forum=getforuminfo($thread['forumid']);

then you had to add below this code:

PHP Code:


		
			
// Password-Hack-by Afterburner-Start 

if ($forum['password']) {

$boardid="userspezial$thread[forumid]";

if ($bbuserinfo[$boardid] != 1) { 

eval("standarderror(\"".gettemplate('fehler_password_showtopic')."\");"); 

exit; 

} 

}

// Password-Hack-by Afterburner-End

All times are GMT. The time now is 01:46 AM.

Page 3 of 14

Last »

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.00983 seconds Memory Usage 1,743KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (2)bbcode_php_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (1)pagenav_pagelinkrel (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: