vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   Modification Graveyard (https://vborg.vbsupport.ru/forumdisplay.php?f=224)
-   -   Major Additions - vbBux / vbPlaza v1.5.8 (Points + Store System) (https://vborg.vbsupport.ru/showthread.php?t=106953)

caimakale 02-19-2006 09:02 PM

Quote:

Originally Posted by XanTrax
CMX_CMGSCCC - There obviously is an exploit if members on my board and apparently one or two other peoples boards here members can/are doing something to get 50,000 points in less then an hour or so.

Can you question the members who are doing this and find out how they are accomplishing it?

lordofgun 02-19-2006 09:13 PM

changeaways was a typo. do a thread search for it.

rinkrat 02-19-2006 09:14 PM

I just installed for the first time and I'm using ucash as the points system since I had that installed and users have lots built up.

I gave myself permission to use the store and went into the estor and saw all of the items including the bank and glow and all that but there is nowhere to click to purchase any of the items.

Also, where do I put the points into the bank?

GREAT mod by the way from what I've seen on other sites. Got my vote already :)

QueenBee 02-19-2006 09:15 PM

hey could someone help? i changed my name color. and it wont change back. any suggestions??

caimakale 02-19-2006 09:28 PM

Quote:

Originally Posted by QueenBee
hey could someone help? i changed my name color. and it wont change back. any suggestions??

Did you go back into the store where you bought it originally and remove it? You can always go to the AdminCP >> User area and delete it from your profile in there.

XanTrax 02-19-2006 09:28 PM

Quote:

Originally Posted by caimakale
Can you question the members who are doing this and find out how they are accomplishing it?


Ive asked them and they wont tell me so for now I have just created another usergroup and made it "Banned from eStore" so even if they exploit it they cant get all these points then distribute them. They wont tell me or anyone else and only 2 people know it but I would prefer that this exploit for getting points be checked out or something. My forums userbase is about 14-30 yrs of age mostly in the range of 16, 17, 18, 19, and 20 year old people that are pretty knowledgable in C++, Assembly, PHP, HTML, and other things that people of their age shouldnt know.

caimakale 02-19-2006 09:33 PM

Quote:

Originally Posted by rinkrat
I just installed for the first time and I'm using ucash as the points system since I had that installed and users have lots built up.

I gave myself permission to use the store and went into the estor and saw all of the items including the bank and glow and all that but there is nowhere to click to purchase any of the items.

Also, where do I put the points into the bank?

GREAT mod by the way from what I've seen on other sites. Got my vote already :)

What areas did you set to give yourself permission?

caimakale 02-19-2006 09:36 PM

Quote:

Originally Posted by XanTrax
Ive asked them and they wont tell me so for now I have just created another usergroup and made it "Banned from eStore" so even if they exploit it they cant get all these points then distribute them. They wont tell me or anyone else and only 2 people know it but I would prefer that this exploit for getting points be checked out or something. My forums userbase is about 14-30 yrs of age mostly in the range of 16, 17, 18, 19, and 20 year old people that are pretty knowledgable in C++, Assembly, PHP, HTML, and other things that people of their age shouldnt know.

It's kind of hard to fix an exploit that we don't know about. You don't have to set the usergroup thing, you can just go into their account and disable their access to the store.

First of all which version are you using? In 1.1.7 you can go into their user account in your admincp and disable their access to the store.

voleibolmurcia 02-19-2006 09:38 PM

CMX_CMGSCCC

Just modify the template edit for MEMBERINFO, its that easy. Where it says $gift[message] remove that part and fix it up to your liking.


The code to insert in memberinfo template is that:


PHP Code:

            <if condition="$vboptions['ebux_enabled']">
            <
div class="fieldset">
                <
table class="tborder" cellpadding="5" cellspacing="0" border="0" width="100%" align="center">
                <
thead>
                    <
tr align="center">
                        <
td class="thead"><a style="float:$stylevar[right]href="#top" onclick="return toggle_collapse('pointsmode')"><img id="collapseimg_pointsmode" src="$stylevar[imgdir_button]/collapse_thead$vbcollapse[collapseimg_pointsmode].gif" alt="" border="0" /></a>$vbphrase[ebux_name$vbphrase[ebux_points]</td>
                    </
tr>
                </
thead>
                <
tbody id="collapseobj_pointsmode" style="">
                    <
tr>
                        <
td class="alt1">
                            <
div><a href="estore.php?do=donate&amp;userid=$userinfo[userid]">$vbphrase[ebux_points]</a>: $userinfo[points]</div>
                            <
div>$vbphrase[ebux_bank]: $userinfo[bank]</div>
                            <
div>$vbphrase[ebux_total_points]: $userinfo[totalpoints]</div>
                        </
td>
                    </
tr>
                </
tbody>
                </
table>
            </
div>
            </if>
            
            <if 
condition="$show['gifts']">
            <
div class="fieldset">
                <
table class="tborder" cellpadding="5" cellspacing="0" border="0" width="100%" align="center">
                <
thead>
                    <
tr align="center">
                        <
td class="thead" colspan="4"><a style="float:$stylevar[right]href="#top" onclick="return toggle_collapse('usergiftsmode')"><img id="collapseimg_usergiftsmode" src="$stylevar[imgdir_button]/collapse_thead$vbcollapse[collapseimg_usergiftsmode].gif" alt="" border="0" /></a>$vbphrase[estore_gifts]</td>
                    </
tr>
                </
thead>
                <
tbody id="collapseobj_usergiftsmode" style="">
                    <
tr>
                        <
td class="tcat"></td>
                        <
td class="tcat">$vbphrase[estore_sender]</td>
                        <
td class="tcat">$vbphrase[estore_message]</td>
                        <
td class="tcat"><if condition="$show['candelete']">$vbphrase[estore_delete]</if></td>
                    </
tr>
                    
$userinfo[gifts]
                </
tbody>
                </
table>
            </
div>
            </if> 

I didnt found any $gift[message].

I dont understad the 99% of php code. I think the "trick" is in the $userinfo[gifts] that may be the phrase o whatever that shows the image, sender and messagge.

I only want to show the image.

Thank u.

QueenBee 02-19-2006 09:40 PM

Quote:

Originally Posted by caimakale
Did you go back into the store where you bought it originally and remove it? You can always go to the AdminCP >> User area and delete it from your profile in there.


it worked. thanks:)

BLazeD1 02-19-2006 10:00 PM

I tried changing the quantity for Username Glow to 0 - so that it is unlimited, but it wont save!

How can I make all the items unlimited?

XanTrax 02-19-2006 10:30 PM

Quote:

Originally Posted by caimakale
It's kind of hard to fix an exploit that we don't know about. You don't have to set the usergroup thing, you can just go into their account and disable their access to the store.

First of all which version are you using? In 1.1.7 you can go into their user account in your admincp and disable their access to the store.

I dont know about it either but "rumor" has it it has something to do with opera and using new tabs or something like that. I doubt thats it but give it a go.

I am using 1.1.6 version of this plugin. Shall I update so I can disable it person to person?

dagger77 02-19-2006 10:38 PM

Quote:

Originally Posted by BLazeD1
I tried changing the quantity for Username Glow to 0 - so that it is unlimited, but it wont save!

How can I make all the items unlimited?

try -1

VMS 02-19-2006 10:40 PM

I set in Admin CP "Max Gifts Displayed Other Than User Profile" is 10, but it still displays 20 (default). Is there anyway to adjust it the right way ? And are the gifts in User profile can be hidden by clicking on the eye button (like ushop before) or something so it won't show or display out side or users can display what gift they want to be displayed by themselve? Thanks in advance for all the answers and helps.

caimakale 02-20-2006 12:03 AM

Quote:

Originally Posted by XanTrax
I dont know about it either but "rumor" has it it has something to do with opera and using new tabs or something like that. I doubt thats it but give it a go.

I am using 1.1.6 version of this plugin. Shall I update so I can disable it person to person?

Definitely update. I guess I will update my opera browser and see what I can try and figure out.

MorrisMcD 02-20-2006 12:06 AM

I hate to ask again, because you are doing so well as far as support.. But my glow being on the name AND the online status would be fine with me.. However, it is ONLY going on the online status.. Not the username at all.

caimakale 02-20-2006 12:16 AM

Quote:

Originally Posted by MorrisMcD
I hate to ask again, because you are doing so well as far as support.. But my glow being on the name AND the online status would be fine with me.. However, it is ONLY going on the online status.. Not the username at all.

PM me your postbit or posbit legacy template (whichever your use) and I will look at it for you.

Sooner95 02-20-2006 12:32 AM

Finally upgraded to 1.1.7, pretty busy up here last few days, wind storm blew out power for a few days. anyhow, i've fallin behind in this thread and just have one question, tho it may have already been adressed.

The attachemnt cost thing. Its cool, but i don't really care for the redirect to the store to purchase it ect.. Is there anyway it could be set up like this?

Member clicks on attachment, a popup comes up giving them the option of purchasing attachment for set price, yes or no. they click yes, they veiw the attachment and it automatically takes the points, they click no, the popup just goes away and back to the page. Maybe even do this via AJAX?

Also, woul dit be possible to have it where once a member clicks an attachment once, they do not have to pay for it again?

Thanks.

BLazeD1 02-20-2006 12:46 AM

Someone on my forums found an exploit for this, I PM'ed you about it.

AlchemyX 02-20-2006 12:46 AM

How do I make, by default, access denied to post, reply, and post attatchments in a particular forum, on a per usergroup basis, so that my users can buy access to it?

BTW, I am absolutely loving this hack, it's awesome... I'm also trying to integrate it with v3arcade to make it give you a certain amount of points for becoming the new champion, and substantially less, but still some, for making it into the top 10 (but not being champion), and I'm also trying to figure out how to make it cost points to play particular games...

But all this aside, I'm new to vB, so It's taking me a bit to get accustomed to.

Nice hack :-)

MorrisMcD 02-20-2006 12:59 AM

Quote:

Originally Posted by BLazeD1
Someone on my forums found an exploit for this, I PM'ed you about it.


Why dont you share it with us? We are all developers and dont need an exploit... It may be something I want to try to protect against...

dan35 02-20-2006 01:17 AM

Quote:

Originally Posted by Sooner95

Also, woul dit be possible to have it where once a member clicks an attachment once, they do not have to pay for it again?

maybe it's a bad idea. Members may share the same account :)

Zowners 02-20-2006 01:26 AM

I was wondering if it would be possible to display the ammount of points they have in and out of the bank under their Name and info. Such as right here:

http://img98.imageshack.us/img98/4883/ebucks4go.gif

I edited that. I don't actually know how to do it (if you can't tell by the crappy font).

inspiration100 02-20-2006 01:41 AM

might sound strange but how do you enable the attachments cost points ?

rinkrat 02-20-2006 02:08 AM

Quote:

Originally Posted by caimakale
What areas did you set to give yourself permission?


In the ebux Store permissions portion of the Usergroup Manager for Administrator Usergroup. After giving myself permission to use the store, I still can't see any links near any items to buy them.

caimakale 02-20-2006 02:35 AM

Quote:

Originally Posted by rinkrat
In the ebux Store permissions portion of the Usergroup Manager for Administrator Usergroup. After giving myself permission to use the store, I still can't see any links near any items to buy them.

You might also have to set the permissions in AdminCP >> eStore Options >> Manage Categories. In each category are permissions you also need to set.

BTW, your avatar is very fitting for you, but man does it freak me the hell out. :eek:

dan35 02-20-2006 02:55 AM

Quote:

Originally Posted by inspiration100
might sound strange but how do you enable the attachments cost points ?

In eBux Options/Manage Settings:

Points For Attachments Enabled? Yes
All Attachments Cost X Points: x

rinkrat 02-20-2006 02:59 AM

THey are set ok there too, this is so strange. It's like all the stuff is there and it says unlimited and free but there is no link to buy them.

Also, It says I have loads of points but 0 in the bank and I can't access the bank.

Zowners 02-20-2006 03:02 AM

so uhh, what about my question?

I know where to put it, but I don't know what code to put in there.

VBUsers 02-20-2006 03:11 AM

Quote:

Originally Posted by Zowners
so uhh, what about my question?

I know where to put it, but I don't know what code to put in there.

in your

Navbar:

Find:

<if condition="$show['pmstats']"><br /><phrase 1="$vbphrase[unread_x_nav_compiled]" 2="$vbphrase[total_x_nav_compiled]" 3="$session[sessionurl_q]">$vbphrase[private_messages_nav]</phrase></if>

=============================
ADD BELOW
=============================


$vbphrase[posts]: $post[posts]<br />
<a href="estore.php?do=donate&amp;userid=$post[userid]">$vbphrase[ebux_points]</a>: $post[points]<br />
$vbphrase[ebux_bank]: $post[bank]<br />
$vbphrase[ebux_total_points]: $post[totalpoints]<br />



for some reason its not picking up the phrases. can a coder please help out with this issue?

jilly 02-20-2006 03:35 AM

If a member has two different people buy them the same gift, it only shows up once in their postbit. Is there a way to make each gift appear individually, even if it's the same gift?

Exitilus 02-20-2006 03:37 AM

Quote:

Originally Posted by CMX_CMGSCCC

The gift should show up in the profile if you have more than 1 of that gift. For example, if someone gave u 2 beer's, if u delete only 1 of them, the first beer will show up in the postbit as it only lists 1 of each item in the postbit.

Actually this is when as a Admin. I delete someone elses Gift.

IE ... I gave someone a Gift. Then Deleted it by going to their profile. When I did that. It doesn't show up on their profile anymore, but it shows up still in the postbit with no way to remove.

jojo77 02-20-2006 03:48 AM

Having issues with the ban access feature.

Ok just tested the ban function and it does not seem to be working. I bought one to ban a to a test account of mine and that account was still able to access the forum they were banned from. Any suggestions?

fly 02-20-2006 03:49 AM

Quote:

Originally Posted by MorrisMcD
Why dont you share it with us? We are all developers and dont need an exploit... It may be something I want to try to protect against...

Posting that BEFORE an update is a really bad idea.

caimakale 02-20-2006 03:53 AM

Quote:

Originally Posted by Exitilus
Actually this is when as a Admin. I delete someone elses Gift.

IE ... I gave someone a Gift. Then Deleted it by going to their profile. When I did that. It doesn't show up on their profile anymore, but it shows up still in the postbit with no way to remove.

It's because gifts are stored in two different areas. I think this is the interim way of storing things until a better solution is worked out.

caimakale 02-20-2006 03:57 AM

Quote:

Originally Posted by flypaper
Posting that BEFORE an update is a really bad idea.

That's the way microsoft thinks. Microsoft likes to wait until the problem is really big before releasing a fix. It's not until code gets posted publicly that they finally get around to fixing something.

I know CMX isn't microsoft by any means, just pointing out that posting the problem isn't a bad thing.

Unfortunately it needs to be posted. If it is being exploited by something that each of us as admins can disable, then we need to know. We need to be able to stop it on our sites.

The person who said that you can sit and preview over and over did us all a favor. And so does anybody else who finds a point exploit and posts it.

docvader 02-20-2006 04:00 AM

Quote:

Originally Posted by lowandloudinc
in your

Navbar:

Find:

<if condition="$show['pmstats']"><br /><phrase 1="$vbphrase[unread_x_nav_compiled]" 2="$vbphrase[total_x_nav_compiled]" 3="$session[sessionurl_q]">$vbphrase[private_messages_nav]</phrase></if>

=============================
ADD BELOW
=============================


$vbphrase[posts]: $post[posts]<br />
<a href="estore.php?do=donate&amp;userid=$post[userid]">$vbphrase[ebux_points]</a>: $post[points]<br />
$vbphrase[ebux_bank]: $post[bank]<br />
$vbphrase[ebux_total_points]: $post[totalpoints]<br />



for some reason its not picking up the phrases. can a coder please help out with this issue?

For some reason, when I install it, it's not picking up the point values. II've gotten around the phrases). Anyone have any idea why this won't work in the navbar?

In fact, I'm not getting this to show in my postbits either:
Quote:

$vbphrase[ebux_bank]: $post[bank]<br />
$vbphrase[ebux_total_points]: $post[totalpoints]
Any suggestions???

caimakale 02-20-2006 04:02 AM

Quote:

Originally Posted by jilly
If a member has two different people buy them the same gift, it only shows up once in their postbit. Is there a way to make each gift appear individually, even if it's the same gift?

There is a way, but it was left out as an option because at this point the only way to do it is to add an extra query that could really slow sites down.

VBUsers 02-20-2006 04:13 AM

Quote:

Originally Posted by docvader
For some reason, when I install it, it's not picking up the point values. II've gotten around the phrases). Anyone have any idea why this won't work in the navbar?


yea i dont know why maybe a coder could help us out. im trying to figure it out and if i do ill post.

shaynehammy 02-20-2006 04:34 AM

CMX.

Is possible to include what users title was changed to in history? Nice to have a history of all title changes for users.

Thanks


All times are GMT. The time now is 05:09 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04689 seconds
  • Memory Usage 1,889KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_php_printable
  • (24)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (3)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete