FWIW, I'm running 2.3.0, and have had more reports of people being able to get in without a password today, as well.

I told you guys there was a problem with this in post #61. Did you think I was kidding?

Confirmed this weeks ago, and I did pm the author of this hack. He complained that I didn't contact him about the problem, and when I did, I received no response.

That's too bad, this would be pretty badass if it weren't for that odd little bug.

Bug ?
Security flaw !

I hope he can still fix it, I have this installed, working and the flaw is confirmed & reproducable on 2.2.9

I hope he can fix it.

We really needed this hack, and after looking at it, I threw it towards Scott and he fixed it in 1 minute, lol.

Here is version 1.2 which at least works on one of the sites I have it installed on. So hopefully it works for you too.

The changes are the forumdisplay and showthread text that you have to replace, the whole chunck. So, to upgrade, just remove it from those 2 files again and put this stuff instead.

Moo

Nice,

/me clicks install

im getting this Invalid SQL:
SELECT security,forumpass,passtimeout
FROM forum
WHERE forumid =

mysql error: You have an error in your SQL syntax near '' at line 5

mysql error number: 1064

idem
Database error in vBulletin 2.3.0:

Invalid SQL:
SELECT security,forumpass,passtimeout
FROM forum
WHERE forumid =

mysql error: You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 3

mysql error number: 1064

This looks pretty cool, I may have use for this :)