vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   Community Lounge (https://vborg.vbsupport.ru/forumdisplay.php?f=13)
-   -   security seems not a main priority in vb hacks (https://vborg.vbsupport.ru/showthread.php?t=73307)

AN-net 12-27-2004 01:26 PM

Quote:

Originally Posted by Revan
I believe that if you use globalize() and set a field to be => INT, it does the same as intval()
I could be very mistaken, I haven't looked closely at the globalize(), but it sounds like sense to me ;)


//peace

its always nice to be safe;)

Dean C 12-27-2004 01:29 PM

Quote:

Originally Posted by T3MEDIA
Nothing in code is impossable. If I seen it done (other software) it can be done (here).

Umm cheat code cartridges on a console are completely different from implementing a new feature for example.

T3MEDIA 12-27-2004 01:32 PM

Quote:

Originally Posted by Dean C
Umm cheat code cartridges on a console are completely different from implementing a new feature for example.

Its not the bible. Think out of the box on my example.

Brad 12-27-2004 02:43 PM

Quote:

Originally Posted by Revan
I believe that if you use globalize() and set a field to be => INT, it does the same as intval()
I could be very mistaken, I haven't looked closely at the globalize(), but it sounds like sense to me ;)


//peace

Your are right, globalize is a nice little function. Heres a little overview of everything it dose.

Use INT and globalize will run this on the $var

PHP Code:

intval($var); 

If you use STR

PHP Code:

trim($var); 

If you use STR_NOHTML

PHP Code:

htmlspecialchars_uni(trim($var)); 

You can also use FILE, which takes $_FILES['$var'] and makes it $array['$var']

filburt1 12-27-2004 02:54 PM

If you just know what you're doing, you are usually safe. Half of it is common sense and the mantra that no user is trusted. Anytime you see a variable within a query, check it...any time you access a superglobal, check it...etc.

sabret00the 12-27-2004 04:32 PM

you know i only found out what the globalize done by accident :o it's a nice little feature though :)

sabret00the 12-27-2004 04:35 PM

Quote:

Originally Posted by T3MEDIA
What ever. what is wrong with the hacks.
you guys have who clicked install. tell them.

This site is helpful and a joke at the same time there should be a standard. Like to submit a hack it has to fall under x things.

Like I am not even a programmer and I know a simple solution. Have a hack installer. this is a standard all in one installer. (think of it like a gameshark) Now if you want to hack code you do. if you touch code (the installer has in its database) it will warn of a conflit. Then you must code to make it work for all hacks out there.

do that and boom no need for users to install them just click on the installer and it does it itself.

Then vb can watch the hacks and support them. Becuase the way your doing it now... you guys are setting yourself up for the fall and you guys dont even know it yet.

no thanks, the type of installer you're referring too is all too intrusive, the fact of the matter is, if you don't know how to hack manually you shouldn't be hacking your board at all, the mods here are by third party's not paid by jelsoft, it's one thing to set standards, it's another to say you must work in our way.

filburt1 12-27-2004 04:48 PM

Good luck writing such an installer...the one I wrote for vBMS which modifies/creates/etc. templates and replacements, commits db changes, creates scheduled tasks, and more, took forever to write. vB's internal workings, especially for styles, are far more complicated than vB2.

Martyjp 12-27-2004 05:20 PM

The problem with an installer is you then have to make the files writable on your server, which then opens up even more problems

filburt1 12-27-2004 06:46 PM

The vast majority of vB modifications can be done without editing a single stock file. It requires creativity.


All times are GMT. The time now is 10:21 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01488 seconds
  • Memory Usage 1,745KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (3)bbcode_php_printable
  • (5)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete