vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)
-   -   Miscellaneous Hacks - VSa - PayPal Donate (https://vborg.vbsupport.ru/showthread.php?t=236480)

comunidadmh 06-21-2012 02:41 AM

Hello people

I am having a problem.

Install the hack is working, but I get the status bar (as was donated to date) on my website.

Someone could say me what is the code to add it manually in forumhome!

Adam_MSS 06-27-2012 01:32 AM

Quote:

Originally Posted by DarioVinci (Post 2341467)
hello guys after upgrading to vb 4.2 i lost the link to view donations in the quick links popup menu.

Also the Donate link is missed

i reinstalled the template and checked the pluging configuration but everything seems ok.

Any idea?

Same issue here. No link to view/verify donations in the quick links popup menu after updating to 4.2.

meissenation 06-27-2012 10:48 AM

I said it before and I have to say it again - something about this modification is NOT secure. Yet again someone else's paypal address was able to be entered into the settings. I had two donations come in that didn't go to my paypal account and when I logged into my VBulletin Settings someone else's paypal address was in the settings. There's nothing in the VBulletin Control Panel logs for someone logging in and making this change.

Again - there is an active exploit for this modification.

Valter 06-27-2012 12:56 PM

If someone is able to change settings in your AdminCP it has nothing to do with this add-on.

meissenation 06-28-2012 12:40 PM

All I know is they are not doing it through the AdminCP. That means they're somehow doing a SQL Injection attack which changes the value in the database. This is the second time the settings ONLY for the PayPal Donate mod have been exploited. No other changes are being made to the forum.

The fraudulent e-mail address that is being added into my settings is: memogl39@googlemail.com - They have stolen over $100 in donations from my site. :(

The real pain, too, is that PayPal turns a complete cold shoulder to the issue. I've tried submitting multiple fraud cases with them over this and it never gets any response. Trying to submit through the Resolution Center yields an error message so I tried through the Contact Us forms they have and those don't get a confirmation e-mail or any type of response.

When I alerted the users that their donations went to a fraudulent user, they submitted cases to PayPal and they told them there was nothing they could do... Absolutely ridiculous.

tareqbd 07-01-2012 03:30 PM

Is it possible to add a column for IP of the user who donated.
Thank you.

cjwinternet 07-01-2012 09:11 PM

When you use a custom link colour the html is incorrect...

HTML Code:

<span style="color:yellow;"><b>Donate</b><span>
the closing span is incorrect and the colour is used further down the forum.

This is only rendered incorrectly (or pedantically correct) by Internet Exploder. It is ignored by Chrome and Firefox.

Whereabouts would I amend the correct closing span tag please?

dmm2020 07-01-2012 09:24 PM

Quote:

Originally Posted by cjwinternet (Post 2344363)
When you use a custom link colour the html is incorrect...

HTML Code:

<span style="color:yellow;"><b>Donate</b><span>
the closing span is incorrect and the colour is used further down the forum.

This is only rendered incorrectly (or pedantically correct) by Internet Exploder. It is ignored by Chrome and Firefox.

Whereabouts would I amend the correct closing span tag please?

First thing, right off the bat, you do not have a closing tag after donate. It should be </span>.

cjwinternet 07-01-2012 09:34 PM

That's not helpful at all to be honest. I said...

Quote:

When you use a custom link colour the html is incorrect...
Quote:

the closing span is incorrect
Quote:

Whereabouts would I amend the correct closing span tag please?
To be more precise here is the generated html...


<li id="vsapaypal_donlink"><a href="misc.php?do=donate"><span style="color:yellow;"><b>Donate</b><span></a></li>

ForceHSS 07-01-2012 11:50 PM

Quote:

Originally Posted by cjwinternet (Post 2344367)
That's not helpful at all to be honest. I said...







To be more precise here is the generated html...


<li id="vsapaypal_donlink"><a href="misc.php?do=donate"><span style="color:yellow;"><b>Donate</b><span></a></li>

Needs to be
<li id="vsapaypal_donlink"><a href="misc.php?do=donate"><span style="color:yellow;"><b>Donate</b></span></a></li>


All times are GMT. The time now is 06:17 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01992 seconds
  • Memory Usage 1,747KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_html_printable
  • (6)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (3)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete