vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.5 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=113)
-   -   WebTemplates 3.5.x: VB Integrated CMS (Content Management System) (https://vborg.vbsupport.ru/showthread.php?t=103076)

RaceJunkie 05-01-2007 06:08 PM

Problem: User is Moderator as primary group.. They are also a member of two additional groups that are not allowed access.. Moderator can't view page..

Kihon Kata 05-02-2007 02:29 AM

Quote:

Originally Posted by Devile (Post 1239064)
There's a security problem with this mod. If u have it, better disable it til the author fixes it.

Ok, I'm disabling right away.

NOT, this is a great mod.

Logician 05-02-2007 07:30 PM

IMPORTANT SECURITY FIX:

If you are using Webtemplates version 3.5.x or 3.6.00 or 3.6.01, please upload the attached 2 files into your server which fixes a security problem in the hack.

File wt_include.php should be uploaded to /includes/ folder.
File view.php should be uploaded to default forum folder (where showthread.php exists).

After the upload your webtemplate footer should say "version 3.6.02".

This is a quick fix for a security problem which is reported to me yesterday (Thanks to Devile!) and I'll update this thread and the hack if I further develop the patch algorithm.

If you have downloaded the hack ZIP file in the first post after this message of me, you already get the patched 3.6.02 version. If you are using old webtemplates for vbulletin 3.0.x, you don't have to apply any patches.

Kihon Kata 05-02-2007 07:44 PM

updated mine

Stilgar 05-02-2007 07:45 PM

Thanks Logician.

bashy 05-02-2007 07:46 PM

Thanks a lot Logican appreciated on the quick fix...

Just a quicky

I have a few uncached templates, I have used this since 3.5 version and not upgraded anything other than the forum to the latest version, these are the uncached

Uncached templates:

WebTemplates_AdminPanel (1)
WebTemplates_LoginCode (1)
WebTemplates_NowBrowsing (1)

How do i fix these please,, may not respond till tomoz...going bed in a mo!

yessir 05-02-2007 07:50 PM

Thanks Logician!

777333 05-02-2007 08:35 PM

Thanks Logician and Devile for the quick fix!

akulion 05-03-2007 01:32 AM

thanks and updated :)

Razasharp 05-03-2007 04:16 PM

Thanks - updated :)


All times are GMT. The time now is 01:35 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.02496 seconds
  • Memory Usage 1,735KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (3)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete