When watching own forum, this is ettercap output, an Ethernet Protocol sniffer. Output below is Sniffed from separate machine on ethernet, a new request with USER: / PASS: on every new post:

HTTP : <ServerIP>:80 -> USER: <myusername> PASS: <mypassword> INFO: www.<domain>.neta
|/vaispy.php?do=xml&last=71385&r=0.4181947612238931& _=
HTTP : <ServerIP>:80 -> USER: <myusername> PASS:<mypass> INFO: www.<domain>.neta
|/vaispy.php?do=xml&last=71387&r=0.912414499618981&_ == <IP> a
|find_conn: Probable connection attempt <forumip> -> <domain>.neta
|HTTP : <ServerIP> -> USER: <myusername> PASS: <mypass> INFO: www.<domain>neta
|/vaispy.php?do=xml&last=71387&r=0.43136405108593967 &_= <forumip>

Check out the getXML() code in va_spy.js and you'll see that we do nothing with these variables; I can't speak for scriptalacious, but my code add no such variables.

I'll dig through the code to see what is triggering this. I'll let you know when I find it. Threat level is medium, only the server/host can sniff the traffic, which are the same hosts that can sniff logins anyway.

I still use the plugin because it is too useful. :D

The username/pass are only sent when the file is protected by .htaccess, if accessing vaispy.php without an .htaccess file, the user/pass aren't re-sent.

Is there a way to get this to display threads from a forum on a sister site that is not running a vbulletinboard but a plain html site?

Is it possible to add it in a table?

EDIT

I'd also like to know how to edit where it says "#number# replies" and "#number# views" to norwegian, ive managed to translate some of it, but not those two. Any Ideas?
Thanks in advance

It works great until members leave it idle (300-ish), then apache goes into meltdown with these errors:

ALERT - script tried to increase memory_limit to 4294967295 bytes which is above the allowed value (attacker 'xx.xx.xx.xx', file '/var/www/includes/class_xml.php', line 35)

Is there a way to have vaispy stop when a user session times out?

I added it..but how do i allow members to view this as the default?

In vaispy.php
FIND
REPLACE bolded text above with whatever you like.

What do you mean by this?
Do you want them to view it as your index.php page as soon as they come to your site?
You would be better off using the vbadvanced CMPS portal and adding it in there as a module as a part of the front page.

Sorry.. but i'll read all the thread.. and I can't find anything about this.

It is possible to allow to see it only for some usergroup?
I don't want that the guest can see that page. Is it possible?

Thanks.

Ska

I don't know if this is right, but it works for me:

In vaispy.php

FIND

AFTER ADD

This disables the page for unregistered/not logged in guests.