vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.8 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=235)
-   -   Integration with vBulletin - Facebook Connect - Update for Facebook PHP SDK (v.3.0.0) (https://vborg.vbsupport.ru/showthread.php?t=270219)

mtbikemike 10-24-2011 01:37 PM

Quote:

Originally Posted by cache (Post 2260642)
when a new user sign in, the new user can post using admin as a user to post, I kind of think this is a security problem, I have 3.8.5

Using admin? Are you sure you didn't accidentally link your admin account to FB? Or maybe you want new users to not be able to post without an email verification?

mtbikemike 10-24-2011 01:38 PM

Quote:

Originally Posted by xXxStitchxXx (Post 2260693)
Any news about vbseo fix?

No news. Haven't had time to look at it.

Taringa! CS 10-25-2011 01:18 PM

Quote:

Originally Posted by Taringa! CS (Post 2258572)
Is it possible instead of showing tdFBNotConnected and tdFBNotConnected by default and then hide one of them, to make them hidden and then display the right one?

???

cache 10-30-2011 11:35 PM

the install instruction was not detailed enough on how this fb connect work. Maybe I accidentally linked admin account to FB, or maybe I set new users to not be able to post without an email verification, but how do I debug this?
Thanks in advance.

Quote:

Originally Posted by mtbikemike (Post 2260963)
Using admin? Are you sure you didn't accidentally link your admin account to FB? Or maybe you want new users to not be able to post without an email verification?


MissKalunji 11-04-2011 04:20 PM

I got a database error, would this mean it won't work with 3.8.1?

Quote:

Database error in vBulletin 3.8.1:

Invalid SQL:

SELECT fbuid
FROM fbuser
WHERE userid =;

MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 3
Error Number : 1064

MissKalunji 11-04-2011 05:23 PM

and when I try to view the user's profile

Quote:

Database error in vBulletin 3.8.1:

Invalid SQL:
SELECT location, badlocation FROM session WHERE userid = AND lastactivity > 1320426455 ORDER BY lastactivity DESC LIMIT 1;

MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND lastactivity > 1320426455 ORDER BY lastactivity DESC LIMIT 1' at line 1
Error Number : 1064

RJ2 11-06-2011 10:02 AM

Works fine for me but I have a concerned user who reported today being logged directly into another member's account after connecting using the Facebook button from this add-on and being able to read their PM's, etc. Members are unrelated and from different countries. I can't see any obvious connection or reason it would put them into another account.

Major security issue if true, any ideas what could cause it?

Vibhor 11-07-2011 02:29 PM

Unfortunately, there seems to be some serious niggles with this add-on. So marked uninstalled.

A.Chakery 11-08-2011 02:52 AM

Works great on vb 3.8.7,

But I have a problem here,

When the user signs up, he has to fill his profile fields again,

I don't know why but in the Auth. window from facebook there is only one option "Post to Facebook as me"
but I noticed that in your website there is 2 other options :
"Access my basic information" and "Send me email".

would you please tell me how to activate those too ?

MissKalunji 11-08-2011 03:44 AM

Quote:

Originally Posted by Vibhor (Post 2265363)
Unfortunately, there seems to be some serious niggles with this add-on. So marked uninstalled.

looks like i have to do the same :(

MoMan 11-21-2011 05:03 PM

Quote:

Originally Posted by Vibhor (Post 2265363)
Unfortunately, there seems to be some serious niggles with this add-on. So marked uninstalled.

I'm experiencing the same issue. I took a look at the functions file and fblogin.php, and while there were some minor issues (query treated the userid as a string instead of an integer, userid not checked for == 0 when linking an existing account to facebook), I don't think those are the culprits.

In any case, if the problem isn't identified soon then this plugin isn't going to be very useful...

mitor2006 11-26-2011 09:26 AM

Hi, im have a problem, im it's already connect with facebook but ask to connect again,

http://img402.imageshack.us/img402/2990/immaginemds.png



Fix:
open:
Code:

fbconnect_init
find:
Code:

document.getElementById('divPostToFBConnect').style.display = 'block';
Replace:
Code:

<!-- document.getElementById('divPostToFBConnect').style.display = 'block'; -->
if you dont use the PostToFBConnect, just the style go to NULL.

Great Mod!
Thanks.

A.Chakery 12-03-2011 03:12 PM

Quote:

Originally Posted by A.Chakery (Post 2265551)
Works great on vb 3.8.7,

But I have a problem here,

When the user signs up, he has to fill his profile fields again,

I don't know why but in the Auth. window from facebook there is only one option "Post to Facebook as me"
but I noticed that in your website there is 2 other options :
"Access my basic information" and "Send me email".

would you please tell me how to activate those too ?

any support ?

MoMan 12-05-2011 04:57 PM

Why is this mod still around if there's a security hole in it? Would like to hear some feedback on this asap.

britt 12-10-2011 03:38 PM

I added this and managed to get it to connect to facebook but I'm having an issue with the connect button not working. :( All I see is 3 small boxes. When I place my cursor over the boxes it says connect to facebook but there is not anything to click.

Can someone help me out with this? pretty please :)

mtbikemike 12-11-2011 02:20 PM

FYI - this mod is in beta. Lately I haven't had any time at all to donate to this mod. I'm expecting to free up some time in mid-January 2012. Until then, you're on your own.

canaryforum 12-16-2011 02:48 PM

All installed and looks OK and "half works" but my main problem is clicking on the F connect button opens a dialog popup "XD Proxy" which I guess is the facebook verification or facebook log-in if not logged in their already.

Anyway, mine is blank when it popus up so I go to log on my forum with my forum Id and once in, I'm connected to facebook!

So this at least means people who register on my forum can afterwards connect their forum account to their facebook account but I guess the main idea of this mod is so they don't have to register on the forum.

Any ideas?

canaryforum 12-16-2011 10:01 PM

Fixed it - I had my facebook app with /forums/ in the url when the forum was installed in the main html folder.

tommydamic68 08-25-2012 02:49 PM

1 Attachment(s)
I get the Facebook login button when I am logged into my site normally - when logged out I also see the Facebook login button, when I click the Facebook login button a small screen flashes (appears to be fb permissions screen) then I get this error (atatched) and it will not let me login - any suggestions or help?

Thanks,

stryka 08-26-2012 04:59 AM

just like the original SILK mod... this is now on the deadpool

wish these developers would stick around...

Quote:

Originally Posted by mtbikemike (Post 2276751)
FYI - this mod is in beta. Lately I haven't had any time at all to donate to this mod. I'm expecting to free up some time in mid-January 2012. Until then, you're on your own.


pedrovazquez10 09-01-2012 02:27 PM

Only give problems uninstalled

saini1987 09-05-2012 12:33 PM

XML Error: Processing Instruction not finished at Line 303

Boylen33 09-14-2012 06:28 PM

Does this work with V4?

A.Chakery 09-14-2012 06:52 PM

Quote:

Originally Posted by Boylen33 (Post 2365438)
Does this work with V4?

Why do you need this plugin for vB4 ? its already implanted in VB4.

zyiad 09-18-2012 07:17 PM

thanks

ChiNa 09-19-2012 06:46 PM

This MOD has really issues! Now 5 of my users after logged out, they clicked direct on the FACEBOOK CONNECT button, and guess what happend? They logged in in another users name!

YOU NEED TO FIX THIS MATE, OR YOU WILL HAVE TROUBLE with this mod!

Thank you

oBen28 09-22-2012 11:53 AM

1 Attachment(s)
How can we subtract this feature on the registration form ? Example

stryka 09-28-2012 01:38 AM

Just curious... did this MOD convert the old proxy emails in the user account from Silk's mod?

blind-eddie 10-31-2012 03:48 AM

Quote:

Originally Posted by ChiNa-Man (Post 2366750)
This MOD has really issues! Now 5 of my users after logged out, they clicked direct on the FACEBOOK CONNECT button, and guess what happend? They logged in in another users name!

YOU NEED TO FIX THIS MATE, OR YOU WILL HAVE TROUBLE with this mod!

Thank you


Anyone else having this issue?

tommydamic68 10-31-2012 09:36 AM

Yes, but no support, see thread above. Old, out dated, no support.

ChiNa 10-31-2012 12:33 PM

Quote:

Originally Posted by blind-eddie (Post 2377199)
Anyone else having this issue?

Thanks to blind-eddie https://vborg.vbsupport.ru/images/cs...s/viewpost.gif for pointing this out and for PM me about this! Now I actually think this issue was the most shocking issues of all our online time! And I will try explain it exactly so you all know what you should be doing, and checking on this ADDON..

How could this happen??

My forum moderator called me and told me about this issue! I couldnt believe him, and even at one point I suspected him to be one of those people cursing in our forum, WHICH WAS A BIT NERV-Wracking..

Basicly our moderator logged into his account in the forum, and directly clicked on the "Facebook Connect" button for , , and he was now suddenly redirected and logged into another users account, which was assigned to the persons FACEBOOK account as well!

The button should not be be visible for Logged-in members.. and we did this 2-3 times again and again, still we were getting logged in as another USER! So hopefully this will be fixed! Else follow the steps I have provided below to hide the FACEBOOK CONNECT button from logged-in users..

This was all from me! Once again thanks to "blind-eddie https://vborg.vbsupport.ru/images/cs...s/viewpost.gif" for poiting this out!
_____________________________________________


HERE IS A SAFETY TRICK, for the button to not be visible for logged in users:

Follow my steps
If you wanna use this addon, make sure to do the following thing, because this is not HIDDEN from the users as it should be! So after people login to the forum, the "FACEBOOK CONNECT" button is still visible in the forum, and this is what caused this issue!

So to hide it from Logged in members, there is a file called Install.html file inside the ZIP file..
Now on STEP 5, It tells you to add the following code in your footer:

It ask you to add this code in your navbar, below another code:
Code:

<!-- fbconnect -->
 $fbconnect_init
 <!-- / fbconnect -->

Instead of that code, Add this code below the other in your footer template:

Add Code:
Code:

<if condition="$show['guest']">
<!-- fbconnect -->
 $fbconnect_init
 <!-- / fbconnect -->
</if>

Thats it, This code makes the FACEBOOK CONNECT button only visible for GUESTS! Now no logged-in members can use it! Like what happend in our forum which caused that a member was logged into another persons facebook account and our forum!

So for your users safety and your forums safety use this instead. Untill this issue is fixed..

Regards ChiNa-Man

Mecho 11-06-2012 08:21 AM

ChiNa-Man , in this post u said AFTER LOGGED OUT they clicked again and logged into another user ! but ur trick is not fixing that ! i dont get it ! u just hide the button for logged in users! whats the point if even after logged out they can login to another user???

i haven't installed this yet. my vb is 3.8.7 . i just wanted to make sure that with ur trick it is all safe to go for this FB Connect.

ChiNa 11-06-2012 01:05 PM

Quote:

Originally Posted by Mecho (Post 2378798)
ChiNa-Man , in this post u said AFTER LOGGED OUT they clicked again and logged into another user ! but ur trick is not fixing that ! i dont get it ! u just hide the button for logged in users! whats the point if even after logged out they can login to another user???

i haven't installed this yet. my vb is 3.8.7 . i just wanted to make sure that with ur trick it is all safe to go for this FB Connect.

Nope, They cannot login into another account by not being logged in! I dont know why that happens when people are logged int!

But its more safe that no one is logged in to use the button!

I just made it to make sure this doesnt happen to anyone else! You can visit our forum www.China-Cheats.com and I am using the same trick! Since we havnt had any problems again.

What I figured out was, that when people are logged in, then there will be some kinda bug that STILL is manipulating with the USERS TABLES assigned to other accounts, which is to let others login to others Facebook account.. So its more safe that they are not logged in!

Mecho 11-06-2012 01:21 PM

1 Attachment(s)
Quote:

Originally Posted by ChiNa-Man (Post 2378857)
Nope, They cannot login into another account by not being logged in! I dont know why that happens when people are logged int!

ok Great , i just wanted to make sure that there is no issue after that button fix for you.

no its kind of safe to go for this for me :) thanks for confirm and your reply.

Edit : i have installed this on vb 3.8.6 . there are 2 problems so far so i had to stop :

1 - in navbar 3 buttons will be shows up ! (check the Screenshot)
2 - other problem is that the 2 up buttons are redirecting to the FACEBOOK PROFILE page and the third one leads to nowhere !!!

any idea?

p.s. i have uploaded all files . added the API and Secrect and not sure what i missed.

ChiNa 11-07-2012 12:08 AM

Quote:

Originally Posted by Mecho (Post 2378866)
ok Great , i just wanted to make sure that there is no issue after that button fix for you.

no its kind of safe to go for this for me :) thanks for confirm and your reply.

Edit : i have installed this on vb 3.8.6 . there are 2 problems so far so i had to stop :

1 - in navbar 3 buttons will be shows up ! (check the Screenshot)
2 - other problem is that the 2 up buttons are redirecting to the FACEBOOK PROFILE page and the third one leads to nowhere !!!

any idea?

p.s. i have uploaded all files . added the API and Secrect and not sure what i missed.

Mecho I have bad news, IT HAPPEND AGAIN! Again our members was logged in to others account, and when I came to test it, It happend to me too! I am using a vB3.8.7.. But we used it also on 3.8.6 but had no problem!

I have simply REMOVED it this time, untill they fix it! We have to report this addon to get fixed, This is the only working FACEBOOK addon right now for vB3.8.! I did report it last week, and Ima have to do it again because we need this.. But this is to dangerouse to have it Installed on vB3.8.7! And we have done a clean install a few times now, Just done wanna take any chance again..


Now about your ISSUE: I think you are using a Custom theme, or a theme that the HEADER and NAVBAR is different to other vBulletin 3.8 Versions! If you have uploaded the images right, and I can see you have + if you have put the API and SECRET key in, then it should be it! Nothing else needed! So I do not understand why it looks like it does.. But please if you want further than this, you can always pm me with your board name, and I could maybe try fix it with an amdin LOGIN!

If you have put the NAVBAR code as I have told you, then its your theme the causing this.. Let me know if you still havnt fixed it! But I have removed it from our board, and I will try Install other versions of it!

Mecho 11-07-2012 11:38 AM

sad to hear that ChiNa-Man , there is no need to fix my problem then as it is not really safe for users.

i'm gonna report this too. hope someone will fix the problems ASAP.

thanks for trying to help agian, please let us know if u find anything.

TheSupportForum 11-07-2012 12:01 PM

tbh i've looked at this mod in all files

1 thing i can say about it, is thats its not using a vBulletin cookies control its using Facebook cookie, in 1 of the files it does reference to changing the cookie variable
for integration purposes which i don't think the developer even looked over

BirdOPrey5 11-10-2012 04:05 PM

I see this thread reported but we (forum staff) do not fix broken mods. I see the mod author was online as recently as last month, I suggest PMing him (1 person do it, he doesn't need 10 PMs) and explain the issue.

Otherwise if everyone is having this problem you should disable or remove it until it is fixed.

Mecho 11-12-2012 12:34 PM

I Have PMed the coder and explained the issue . no reply :)

blind-eddie 11-12-2012 02:12 PM

Quote:

Originally Posted by BirdOPrey5 (Post 2380006)
I see this thread reported but we (forum staff) do not fix broken mods. I see the mod author was online as recently as last month, I suggest PMing him (1 person do it, he doesn't need 10 PMs) and explain the issue.

Otherwise if everyone is having this problem you should disable or remove it until it is fixed.

This mod should not be allowed to be downloaded until it is fixed, right?
With what others are saying about this addon, it poses a threat to member accounts either on their vbulletin site or their FB account.


All times are GMT. The time now is 01:03 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01724 seconds
  • Memory Usage 1,851KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (5)bbcode_code_printable
  • (17)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete