vb.org Archive
Page 4 of 4 « First 23 4
Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.5 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=113)
-   -   Integrate ParaChat v7.0 Into vBulletin - Hosted Chat Services (https://vborg.vbsupport.ru/showthread.php?t=105835)

Eq4bits 03-27-2009 08:31 PM
I have the 'Standard' paid version of Parachat (formerly called 'Advanced') and the # of chatters is built in to the Standard paid version.
Running vB 3.8.1 PL1
Just tried integrating this and after making the navbar changes when I save the template I get an error message stating that an expected ']' is missing on line 114 of adminfunctions_template.php.

when I check adminfunctions_template.php lines 113-117 show as follows, but I'm not catching where a bracket should be
Code:
if (is_array($template))
{
array_walk($template, 'array_trim');
$template = "background: $template[background]; color: $template[color]; padding: $template[padding]; border: $template[border];";
}
what am I not seeing?

hqarrse 12-03-2010 10:39 AM
Warning.

This integration has a file chat_auth.php . It is an unprotected tool for testing username/ password pairs and therefore an open invitation to hackers. If you are using parachat I strongly suggest you stop until this problem is sorted. I have reported this to parachat but as yet (5 days later) have had no response.

hqarrse 12-06-2010 07:49 AM
Response:

Quote:

Thank you for contacting ParaChat Support. I apologize for the delay in responding to your inquiry. The vBulletin module to which you refer is not available for download from our web site at this time. Please note that all of our third-party integration modules are currently being re-developed, including the vBulletin integration module. The new modules will include a method to recognize calls where applicable, and will be available for download from our web site when they are completed. But utilization of the HTTP Authentication file itself is optional.

The HTTP authentication file is deployed on installations external to the ParaChat system, so its level of exposure from a security standpoint will vary from installation to installation. The Auto Log-in feature could be utilized exclusive of HTTP authentication. Also, if the HTTP authentication feature is used, your ParaChat service could be configured to limit the number of simultaneous connections allowed per IP address. However, the remedy for the issue as you describe it will be the utilization of the new module when released. We understand your concern, and genuinely appreciate your feedback on this topic.
A good point that even if you do protect the file, then the chat system itself can be used for brute force as there are no maximum tries, but I'm guessing that since this is via a java applet, it is more of a task for a hacker than just downloading an HTML form hacking tool.

Anyway, assuming Parachat come good with their updated module, then I am impressed with the response, although it did take a week. In the mean time you can look at your server log and see what IP address they are using to request autorisation on chat_autrh.php and limit access to it, so:

Code:
<Directory /mypath/mydirectory>
<Files chat_auth.php>
order deny,allow
deny from all
allow from 64.13.158.89
</Files>
</Directory>
I don't know how often that IP address will vary. Time will tell I suppose - I'll watch my logs and wait for complaints.

hurricane_sh 02-10-2011 01:18 PM
It would be great if you could create a mod for vB4.


All times are GMT. The time now is 03:51 PM.
Page 4 of 4 « First 23 4
Show 40 post(s) from this thread on one page

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01178 seconds
  • Memory Usage 1,727KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (1)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (4)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 
Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete