vb.org Archive - Password Protected Forums (vB3 Style)

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 2.x Full Releases (https://vborg.vbsupport.ru/forumdisplay.php?f=4)

- - Password Protected Forums (vB3 Style) (https://vborg.vbsupport.ru/showthread.php?t=50012)

Quote:

04-23-03 at 06:35 PM xiphoid said this in Post #76
We really needed this hack, and after looking at it, I threw it towards Scott and he fixed it in 1 minute, lol.

Here is version 1.2 which at least works on one of the sites I have it installed on. So hopefully it works for you too.

The changes are the forumdisplay and showthread text that you have to replace, the whole chunck. So, to upgrade, just remove it from those 2 files again and put this stuff instead.

Moo

Ok
A few problems here

I have applied the modifications that were kindly supplied by xiphoid (cheers for those)

Now when I go to view a thread, I am getting :

Code:

Database error in vBulletin 2.3.0:



Invalid SQL: 

        SELECT security,forumpass,passtimeout

        FROM forum

        WHERE forumid = 



mysql error: You have an error in your SQL syntax near '' at line 3



mysql error number: 1064



Date: Wednesday 07th of May 2003 02:46:23 AM

Script: http://localhost/rnas/rnas/showthread.php?s=&threadid=7

Referer:

Also when modifying a forum to incorporate the protection, Im still getting this :

Code:

Password protection enabled, yet no password was submitted.

(Forum access can be gained by leaving the password field blank on entry.)

In this instance, it appears the password is still being applied though.

i have install the hack but dont work 100% beusoe if you test any work 8488 and real password was vb200325 and the user can com in the Protected Forums and can test any t and they can oben how ican fixe it and why dont work 100%

Thankes for helpp it is real cool hack if they work in the my from i need to the hacks very much

Has anyone come up with a complete 100% working version of this hack yet ?

Quote:

05-03-03 at 09:41 PM marlborosat said this in Post #79
idem
Database error in vBulletin 2.3.0:

Invalid SQL:
SELECT security,forumpass,passtimeout
FROM forum
WHERE forumid =

mysql error: You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 3

mysql error number: 1064

and everyone else getting mysqp errors.
put them in one at a time i was putting them in at the same time and getting the same error. but sucess every time putting 1 in at time

Very very nice hack.

i have 2 problems with this

first is i can't change the password once its set or anyting else for that matter it just won't update those feilds

Password protection enabled, yet no password was submitted.
(Forum access can be gained by leaving the password field blank on entry.)
Record updated!

thats what it says when i try to update for some reason the password var is not being set

and the second it would appear the once a user has a cookie you can access the forum without entering the pass and after the time out period i had mine set for 60 mins i waited 2 days and was able to get access

any ideas for a fix??

Sorry everyone, I've been away for the past couple of months - now I'm back, and I've got a bit of time to fix any issues there are with my current hacks.

Is the modified version that xiphoid posted working fine? If so, should I update the original?

i'd like to click install but i can't get it to work:)

Quote:

Is the modified version that xiphoid posted working fine? If so, should I update the original?

I'd like to know the answer to that myself, can anyone confirm they have a fully working version ??

Cheers
amp2000

For everyone getting errors similar to the following from xiphoid's update

Code:

Database error in vBulletin 2.3.0:



Invalid SQL:

SELECT security,forumpass,passtimeout

FROM forum

WHERE forumid =

The problem is that $forumid isnt in single quotes, example, instead of

Code:



Open up: root/showthread.php



Find:

-----------------------------------------------------------

eval("dooutput(\"".gettemplate("showthread")."\");");

-----------------------------------------------------------



Replace with:

-----------------------------------------------------------

// Showthread Password Protection Code

// Updated by Scott

$forumid = $foruminfo['forumid'];

$seccheck = $DB_site->query_first("

        SELECT security,forumpass,passtimeout

        FROM forum

        WHERE forumid = $forumid

");

The above code is wrong, use the code below instead of the above from the readme.
The only difference is '$forumid' now has quotes around it. Hope that helps yas ;)

Code:



Open up: root/showthread.php



Find:

-----------------------------------------------------------

eval("dooutput(\"".gettemplate("showthread")."\");");

-----------------------------------------------------------



Replace with:

-----------------------------------------------------------

// Showthread Password Protection Code

// Updated by Scott

$forumid = $foruminfo['forumid'];

$seccheck = $DB_site->query_first("

        SELECT security,forumpass,passtimeout

        FROM forum

        WHERE forumid = '$forumid'

");

I have installed this on a 2.3.0 vBulletin & can see no problems (other than the above which is now corrected) with the hack.
But then again I've only installed the hack from xiphoid's 1.2 version so I dont know what the bug was with Shaolyen's 1.1 version.
If someone can tell me how to reproduce the flaw I'll test it out & let yas know if it works. If anyone is reluctant to tell me how to reproduce the flaw will you pleeeez see does it work on the new updated instructions, ie v1.2, I need to know whether this is secure or not before I use it.

This is a great hack Shaolyen, I'll be definitely clicking install if this works, thanks!

X vBulletin 3.8.12 by vBS Debug Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (5)bbcode_code_printable (3)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages:

Phrase Groups Available:

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01864 seconds Memory Usage 1,751KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (5)bbcode_code_printable (3)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: