vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.6 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=194)
-   -   Miscellaneous Hacks - Cyb - Advanced Forum Rules (https://vborg.vbsupport.ru/showthread.php?t=122998)

RedGTiVR6 06-11-2007 12:41 AM

Quote:

Originally Posted by RedGTiVR6 (Post 1263487)
ok - so when I go to the demo it takes me to a page full of smilies...when I install on my forum, it does the same thing...what gives?

So I reinstalled, and now when I go to:
index.php?do=cfrules

on my site, nothing:

http://www.mp3car.com/vbulletin/index.php?do=cfrules

Running 3.6.7PL1

Any ideas?

Valter 06-11-2007 01:10 AM

Quote:

Originally Posted by RedGTiVR6 (Post 1265865)
So I reinstalled, and now when I go to:
index.php?do=cfrules

Why go to index.php?do=cfrules ?
Rules page is found at: misc.php?do=cfrules

SuperTaz 06-11-2007 01:12 AM

very nice...installed

bigcurt 06-13-2007 03:20 AM

for some reason it will never let people accept rules..stuck on the number ( 3 is what mine is set to )..any answer?

bigcurt 06-13-2007 03:24 AM

Edit: I see a lot of people have been asking about it..but no answer.

Grievy 06-14-2007 11:46 PM

Is there anyway to exclude certain forums?

So to post in forum number 8 the user must have agreed to the rules. However if they first try to post in forum 5 there will be no problem.

Alfa1 06-17-2007 09:53 PM

Can you please add the function that if a member receives a infraction, he/she is forced to read the rules?

What should I advise my members when they tell me they are not to accept the rules, because either the counter doesn't run or the accept button doesn't work?

Dotara 06-28-2007 06:24 PM

How do I change the green color of Forum Rules to something else?

[Solved] Found it and changed. Nice hack Cyb! :D

aakhan136 07-14-2007 05:56 PM

Thanks

NashChristian 07-14-2007 10:50 PM

Hello.

Are you working on an update to be compatible with version 3.6.7?

I would be interested in installing it if so.

Thanks!

Alibass 07-14-2007 11:12 PM

Quote:

Originally Posted by NashChristian (Post 1291226)
Hello.

Are you working on an update to be compatible with version 3.6.7?

I would be interested in installing it if so.

Thanks!

I have been running this hack on 3.6.7PL1 since the upgrade with no problems. Works great! :)

axi 07-19-2007 07:42 AM

can this hack only be used in a certain forum id instead of or aswell as when registering???

itsblack 07-22-2007 05:36 AM

Oops, thanks for update, but it seems like that you've forgotten to upolad the product file.

princeedward 07-22-2007 06:57 AM

copy of email received....

Quote:

calorie has updated the following hack:


This is the update reason that the user gave:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This modification contains a MySQL injection vulnerability, and you are hereby advised to uninstall this modification until such time that the author provides a fix.

-- vBorg Staff
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Yours,
The vBulletin.org Forum team
do we have to uninstall this mod???

Ev!L ErN!E 07-22-2007 07:20 AM

Quote:

Originally Posted by princeedward (Post 1298018)
copy of email received....



do we have to uninstall this mod???

no just update it to version 3.5 (it has the bug fixes needed)

princeedward 07-22-2007 08:29 AM

Quote:

Originally Posted by Ev!L ErN!E (Post 1298029)
no just update it to version 3.5 (it has the bug fixes needed)

thanks...but where's the update version 3.5 file...:confused:

Valter 07-22-2007 09:35 AM

v3.5 - Jul 22. 2007.
-Fixed bug (MySQL injection vulnerability - attacker can trick admin to reset rules acceptance status for all members)
-Group membership checking works now for supplementary usergroups too
-Several code improvements

Upgrade info:
-Import product XML, allow overwrite.
-Revert hack templates if any modified

0tolerance 07-22-2007 10:01 AM

wow i was just sitting there thinking i wonder when the new files will be updated.. this other rules addon i have sucks!

*clicks install*

itsblack 07-22-2007 10:05 AM

updated, thank you very much.

Ev!L ErN!E 07-22-2007 09:41 PM

ummm ok so is 3.5.1 the official fixed version now? the last two updates were flagged as risks... I just wanna make sure.

Dismounted 07-23-2007 05:57 AM

Yes, I have just checked 3.5.1 and it does not have the reported vulnerabilities.

Valter 07-23-2007 09:22 AM

v3.5.1 - Jul 22. 2007.
-Fixed bug (XSS Vulnerability)

To upgrade: Import product XML, allow overwrite.

Dotara 07-23-2007 09:49 AM

thanks for the update. Hope Login To User Account will be fixed too.

PersianImmortal 07-23-2007 10:28 AM

Updated, and thanks for this mod, it's very handy indeed :)

BobbyBig 07-23-2007 10:59 AM

Bug:

Button Countdown is not working, it stays at 20.

ERROR: unterminated string literal
Quelldatei: http://www.xxxx.de/misc.php?do=cfrules&adis=1
Zeile: 612, Spalte: 12
Quelltext: alert("Um die Nutzungsbedingungen zu akzeptieren, markiere bitte das Feld.

ERROR: cyb_button_countdown is not defined
Quelldatei: http://www.xxxx.de/misc.php?do=cfrules&adis=1
Zeile: 1


EDIT:

We changed the $vbphrase[cybfrules_not_agreed] Phrase and retested, now it works. maybe there was a hidden char in it which caused the error.

inciarco 07-23-2007 01:17 PM

No File Appears to Download!! :(

"Download Now - No files uploaded."

:)

Valter 07-23-2007 01:21 PM

v3.5.2 - Jul 23. 2007.
-Another security exploit fixed

To upgrade: Import product XML, allow overwrite.

jonty 07-23-2007 01:23 PM

you know the mods just want you to keep re-releasing until the version numbers match 3.6.7 ;)

Mrdby 07-23-2007 01:29 PM

Installed

PamelaE 07-23-2007 03:31 PM

Hi,

Great idea but as many have asked does this allow you too add rules to certain forums. I only want to activated on my News and Politics forum. It has a seperate set of guidelines.

I saw the hack that did allow this has been sent to the graveyard.

Does anyone know or know of a hack that does have the funtionality I require.

Thanks

NiTRoN 07-23-2007 04:11 PM

Thanks "Cyber" for your superb dedication to keeping our boards safe and fixing the exploits in record time.

PersianImmortal 07-23-2007 05:09 PM

The new 3.5.2 seems to have a bug in it - using a test account, I found that after the forum rules are accepted it doesn't redirect properly. I believe it's adding an extra amp; in the URL between the & and the subforum number for some reason, so you get an error saying 'invalid forum specified' when it tries to redirect.

/EDIT: When I searched for and removed the first five occurrences of amp; in the .xml file, and reimported it, it seems to work fine now. However I'm not sure if this opens up the exploit again or not.

/EDIT 2: This is on a VB 3.6.0 forum, so it may just be my VB version perhaps.

princeedward 07-23-2007 06:25 PM

thanks for the update bro cyb... ;)

Ev!L ErN!E 07-23-2007 07:11 PM

wow that sure is alot of security risks..... should I be worried, lol but great job on keeping your hacks updated Cyb, I love the work you do man, keep it up!

itsblack 07-23-2007 09:43 PM

Quote:

Originally Posted by PersianImmortal (Post 1299355)
The new 3.5.2 seems to have a bug in it - using a test account, I found that after the forum rules are accepted it doesn't redirect properly. I believe it's adding an extra amp; in the URL before the & and the subforum number for some reason, so you get an error saying 'invalid forum specified' when it tries to redirect.

/EDIT: When I searched for and removed the first five occurrences of amp; in the .xml file, and reimported it, it seems to work fine now. However I'm not sure if this opens up the exploit again or not.

/EDIT 2: This is on a VB 3.6.0 forum, so it may just be my VB version perhaps.

There's no problem by my forum. My VB version is 3.6.7.

Mupetz 07-24-2007 01:54 PM

Thanks for the update maestro ;)

Valter 07-25-2007 04:22 AM

v3.5.3 - Jul 25. 2007.
-Fixed bug where user is not properly redirected after accepting rules

To upgrade: Import product XML allowing overwrite.

Mrdby 07-25-2007 04:30 AM

updated!!!!

PersianImmortal 07-25-2007 04:32 AM

Thanks very much for making that fix Cyb, I've tested 3.5.3 and it works perfectly now. Great work and thanks again for a great mod.

Valter 07-25-2007 10:50 AM

v3.5.4 - Jul 25. 2007.
-Bug fixed where username info is not shown when going to reset acceptance status


All times are GMT. The time now is 09:53 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01613 seconds
  • Memory Usage 1,809KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (7)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete