vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.7 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=228)
-   -   Miscellaneous Hacks - Cyb - Advanced Forum Rules (https://vborg.vbsupport.ru/showthread.php?t=177559)

Valter 07-15-2009 03:38 PM

Just ensure that templates named cyb_frules_X are not shown in red in template list.

Red means modified. When you select modified template you'll get Revert button on the right side.

Suiram 07-18-2009 04:54 AM

oh, ok, so lisa gets an answer but not ralph ? nice....

anyway i guess i answered myself.

Valter 07-18-2009 07:43 AM

Suiram,

You can allow guests to view or post. Then why not ask them to accept rules as other people do?

However you can exclude them from restrictions and they will never know that this product is installed.

And Phrase Manager is the place to modify/translate text strings. You don't need to edit XML at all.

Suiram 07-18-2009 08:42 AM

thank you...

goshalim 10-02-2009 01:41 AM

Hi ,

Could You Please Include the Possibility to List the Users that Have Accepted Each Rule?
This is very usefull for the admins

Thanks

Macindy 11-17-2009 02:00 PM

There will be a vb4 version?

BadgerDog 01-03-2010 06:43 PM

Installed ok ... thanks Cyb ... :up:

Now, How do I actually edit or ad the rules?

When I select "Edit Rules" under the AdminCP option for the mod, it takes me to a page of smilies? :confused:

Thanks for any help ... :)

Regards,
Badge

Videx 01-21-2010 06:39 PM

Yes, has anyone tried this in vb4?

dmknights 01-21-2010 09:04 PM

this version was last updated may 2009

I would love to see a version for vb4.0 too

majidgbox 02-12-2010 02:55 AM

Quote:

Originally Posted by BadgerDog (Post 1946219)
Installed ok ... thanks Cyb ... :up:

Now, How do I actually edit or ad the rules?

When I select "Edit Rules" under the AdminCP option for the mod, it takes me to a page of smilies? :confused:

Thanks for any help ... :)

Regards,
Badge

I approved this... for me is too
what should we doing?

NetRover 02-13-2010 01:38 PM

Posted by mistake.

haytham 05-01-2010 08:13 AM

"Choose between BB codes and HTML in rules" When did that happen? I can use HTML? That's great news. I was using 3.8 version and never knew. Thanks.

NJTy180 08-02-2010 02:25 PM

Quote:

Originally Posted by BadgerDog (Post 1946219)
Installed ok ... thanks Cyb ... :up:

Now, How do I actually edit or ad the rules?

When I select "Edit Rules" under the AdminCP option for the mod, it takes me to a page of smilies? :confused:

Thanks for any help ... :)

Regards,
Badge

same here.

this hack sucks.

uninstalled.

M.C. 09-05-2010 09:53 AM

I tried to find answer but couldn't do it. Problem is - I have 2 languages on forum (English and Russian) in English language counter at bottom or rules works perfect and allow to agree with rules, BUT in russian langauge it's not working at all and giving java-script error. what can create such a problem?

rjhollan 10-11-2010 10:34 PM

I imported it into my 4.0.7 forum and it doesn't work. The manage rules page is displayed incorrectly, with the following errors above the forum header:

Warning: array_merge() [function.array-merge]: Argument #1 is not an array in [path]/includes/class_bootstrap.php(1280) : eval()'d code on line 72

Warning: fetch_template() calls should be replaced by the vB_Template class. Template name: navbar in [path]/includes/functions.php on line 3984

Parse error: syntax error, unexpected T_STRING in /home/foo/www/forum/misc.php(89) : eval()'d code(176) : eval()'d code on line 1

Warning: fetch_template() calls should be replaced by the vB_Template class. Template name: cyb_frules_mng in [path]/includes/functions.php on line 3984

I'd REALLY like to see this for vB 4.x. I'd even be willing to pay something for it!

Videx 10-11-2010 11:14 PM

Quote:

Originally Posted by rjhollan (Post 2109259)
I'd REALLY like to see this for vB 4.x. I'd even be willing to pay something for it!

Okay, send $20 to your fave charity: VSa - Advanced Forum Rules

rjhollan 10-11-2010 11:33 PM

Heh. I found it after posting, and you beat me to the post with the link to the 4.x version, for others that stumble across it like I did.

:D

LauraM 02-11-2011 05:09 PM

Just installed! It works perfectly. :) Thank you for creating this! :up:

larryd 03-18-2011 10:25 AM

Is there a max amount of characters in the rule field? I'm trying to copy my rules from an existing thread and they are getting cut off each time.

If there is a limit, how can I expand it?

Alfa1 05-04-2011 12:28 PM

A large number of websites have been hacked today. Its possible that this was caused by an issue with this addon. It may be a good idea to deactivate the addon until this is cleared up.

http://www.vbulletin.com/forum/showt...ne-please-help

Quote:

Originally Posted by thincom2000 (Post 2153810)
Reviewed the code for Cyb - Advanced Forum Rules and this can be the culprit as I see an exploit.........


Videx 05-04-2011 04:16 PM

Uh, will this also affect the vb4 version? VSa - Advanced Forum Rules

Paul M 05-04-2011 06:59 PM

Yes, it does affect the vb4 version. It affects the 3.7, 3.8 and 4.x versions.

HFB 05-04-2011 09:22 PM

I see this is no longer quarantined. Thanks for the quick fix. What is the procedure for updating? Specifically should allow overwrite be set to yes, and will that cause data to be lost?

Also what is the db query to set acceptance to yes?

Langaleer 05-04-2011 09:50 PM

I installed the latest update, and now I'm "Hacked by Team Animus", so this is NOT fixed.

z0diac 05-04-2011 10:34 PM

I'm just uninstalling it completely. Nevermind disabled anymore. This mod is too risky, especially with my forum. It's too important to too many people.

Maybe disable ALL Cyb mods until they've been thoroughly checked?

ikorolis 05-04-2011 10:43 PM

guys relax

the reasons have hacked one website is many.... maybe fault VB software (have any flaw or security bug) or maybe fault VB HACK MOD.

if your are fear dont hacked your sites

dont use any mod hack (clean VB Software) this advice from VB Support Staff.

disable all or uninstalled

and have one not usefull (like for anyone) vb payment software on your site.

or pay other website/forum software.

or try other open source website/forum software.

this is my personal opinion.

LauraM 05-04-2011 10:57 PM

I also installed this newest version earlier today..........and now my website has been hacked. :(

ikorolis 05-04-2011 11:20 PM

Rules page demo: http://www.bihforum.com/misc.php?do=cfrules <= this site is hacked.

RCKSTR 05-04-2011 11:45 PM

How do I unistall serverside? I have no forum access

DanaRVT 05-04-2011 11:48 PM

To restore your admin access you will need to go into the database and update in the user table your usergroup ID - this hack switched us from admins to regular users. Change your usergroup and you will be able to get back in to update all the usertitles and disable the addon.

RCKSTR 05-05-2011 12:25 AM

done, thank you!

How do I mass change all user titles? they all say "Hacked by Team Animus"

Suiram 05-05-2011 01:22 AM

Since this mod was quarantined and then restored, (with the claim to have been fixed) does that mean someone here (vbulletin.org) went thru the code line by line to verify the fix and see if the rest of the code is safe? Someone very clever. Was it in fact the mod or something else? Is 4.0.3 safe?

Videx 05-05-2011 01:41 AM

Quote:

Originally Posted by Suiram (Post 2191987)
Is 4.0.3 safe?

Not really, since it's an older version. But whatever vulnerability they've recently discovered seems to be in a lot of different versions.

People found a possible exploit in this mod, but it is now fixed. If sites are still being hacked then the exploit probably lies elsewhere. Nevertheless, this mod has now become tainted and I've got it disabled for now.

BTW, if you've got vb4 you shouldn't have this version installed anyway as it's for vb3.7.

Alfa1 05-05-2011 01:46 AM

Several people report that their site was hacked after installing the latest version of AFR. However, its unclear if this is related to this addon or not.

Suiram 05-05-2011 02:23 AM

Quote:

Originally Posted by Videx (Post 2191993)
Not really, since it's an older version. But whatever vulnerability they've recently discovered seems to be in a lot of different versions.

People found a possible exploit in this mod, but it is now fixed. If sites are still being hacked then the exploit probably lies elsewhere. Nevertheless, this mod has now become tainted and I've got it disabled for now.

BTW, if you've got vb4 you shouldn't have this version installed anyway as it's for vb3.7.

I think you misunderstood. The current version for this mod is 4.0.3. You are thinking about the forum.

I expect an official reply from someone on these forums. I'm more interested in a generic reply to what they do when they "restore" a mod. You would think they would inspect the code and approve it to be re-released. Is that what happens?

Suiram 05-05-2011 02:33 AM

Quote:

Originally Posted by Alfa1 (Post 2191994)
Several people report that their site was hacked after installing the latest version of AFR. However, its unclear if this is related to this addon or not.

I've read this too. What's it mean exactly? How long after the update? Minutes? Hours?
And do they get hacked if they fix the breach and uninstall the mod?

Because this is the way I read their claims:
  1. their vb forum was using this mod @v4.0.2
  2. the forum was breached
  3. they read it may be the mod at fault
  4. they regain/clean their server/forums (one assumes!)
  5. they install the "fixed" 4.0.3 mod
  6. shortly after (minutes/hours?) they are hacked again
  7. they still blame the mod.

To them I say redo step 4 and then disable/uninstall the mod.
See if you get hacked again.
Yes? ==> Most likely not the mod.
No? ==> Hmmmmm.... ==> Enable/install the mod and now see.

(Unless their server is still compromised because it wasn't "cleaned" properly.)

Valter 05-05-2011 09:02 AM

v4.0.3 - May 04. 2011.
-Security bug fixed

To update:
-Import XML, allow overwrite


If your site has been hacked please check out this post:
http://www.vbulletin.com/forum/showt...15#post2154415

TaBsiCore 05-05-2011 09:40 AM

Quote:

Originally Posted by Langaleer (Post 2191900)
I installed the latest update, and now I'm "Hacked by Team Animus", so this is NOT fixed.

Is the bug now definitely fixed? Or did the second hack happened over the installed backdoor? The current situation is a bit confusing.

Valter 05-05-2011 09:45 AM

They have added some files, created new user,...

To properly remove hacking traces please check link posted above.

TaBsiCore 05-05-2011 09:47 AM

I wasn't hacked, the situation is only a bit confusing since other people report that they was hacked (again) even after they upgraded the addon.


All times are GMT. The time now is 05:50 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01784 seconds
  • Memory Usage 1,820KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (8)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete