vb.org Archive
Page 1 of 4 1 23 Last »
Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   Modification Graveyard (https://vborg.vbsupport.ru/forumdisplay.php?f=224)
-   -   Moderators Functions - vbAccessDenied (https://vborg.vbsupport.ru/showthread.php?t=111601)

hambil 03-27-2006 10:00 PM
vbAccessDenied
 
Keywords: admincp, access denied, forum access, access, user, admin, usergroup


This modification contains a MySQL injection vulnerability, and you are hereby advised to unintall this modification until such time that the author provides a fix.
-- vBorg Staff


Description:
A powerful tool for customizing the generic vBulletin access denied message.

Translations
German (Thanks to alluidh)

Features:
  • Fully Phrased.
  • Turn on or off in admin cp.
  • Created a custom message for any vBulletin generic access denied message.
  • Personalize messages with any user, forum or usergroup information.
  • Automatically send a PM to one or more users the first time a member receives a specific access denied message.
  • Personalize the PM with any user, forum or usergroup information.
  • Add an approval link to the automatic PM that will give the user a new primary or secondary usergroup of your choice when clicked.
  • Send a PM to everyone who received the original access request, and the requesting user, when they are approved.
  • Several layers of security.
Use Case
On my board we only allow access to a few forums until a user has been approved by an admin. The sample screen shots show this process in action.

Install
  1. Download the vbAccessDenied_1.0.zip file.
  2. Unzip and upload the files in the upload directory to your forum root.
  3. Import the product file in your admincp.
  4. Create custom messages as desired.
1.1 Changes
  1. Supports bbcodes in messages (see updated screen shot).
  2. Fixed sql bug that prevented many messages from showing properly.
  3. Removed 255 character limit on messages.
Upgrade from 1.0 to 1.1
You will need to reupload all files, and uninstall and reinstall the product to upgrade from 1.0 to 1.1. Please copy your messages to a text editor first if you want to save them.

hambil 03-28-2006 09:18 PM
First post reserved.

IrPr 03-28-2006 09:22 PM
YAY! what i was waiting for
First Click;) Thanks!

will test on my board

goblues 03-28-2006 09:58 PM
Will check out. Should prove to be a great addition!

IrPr 03-28-2006 10:32 PM
Works Fine for me! Thanks again
is it possible to report IP in private message? cause i'm using this mod for unregistered users!

hambil 03-28-2006 10:45 PM
Quote:
Originally Posted by IrPr
Works Fine for me! Thanks again
is it possible to report IP in private message? cause i'm using this mod for unregistered users!
Sure. You can report any user field. For ip just use {user.ipaddress}

COBRAws 03-28-2006 11:04 PM
this is damn good!

Antivirus 03-29-2006 12:30 AM
This is a great idea, gonna try this... I was never happy with the generic denied message...

Also, pretty smart to put keywords for the hack in the top of the first post - nice!

hambil 03-29-2006 01:27 AM
Found a serious sql bug and fixed it. You should re-install. No need to uninstall or upload files - just download the product file again and re-import it.

projectego 03-29-2006 05:49 AM
This sounds interesting, I'll give it a try this evening. Already clicked install by the way. :)

Xplorer4x4 03-29-2006 06:05 AM
Well you can change the access denied message by editing a phrase, but this far surpases that option. This look to be a GREAt hack.

Thank you!

GamerzWorld 03-29-2006 12:49 PM
Cant seem to get it to work, where will the error message display?

hambil 03-29-2006 01:49 PM
Quote:
Originally Posted by GamerzWorld
Cant seem to get it to work, where will the error message display?
By just installing it won't do anything. You have to create custom messages.

The messages will then display when a user tries to do something they don't have access for, if you've created a message for that case. Otherwise they will get the default vBulletin message.

If you tell me what you are trying to do I might be able to help walk you through it. :)

GamerzWorld 03-29-2006 02:39 PM
Quote:
Originally Posted by hambil
By just installing it won't do anything. You have to create custom messages.

The messages will then display when a user tries to do something they don't have access for, if you've created a message for that case. Otherwise they will get the default vBulletin message.

If you tell me what you are trying to do I might be able to help walk you through it. :)
I have several clans on my site. I am trying to make it so that when someone tries to access a private clan forum they are applied for the usergroup of there clan needed for the access. Here is an example of the custom message I added yet it did not display..

Usergroup: Register users
Forum: Private Forum, Spiritual Connections USA
Script: * - Not sure if I should set to somethging?
Send PM : Yes
PM test: this is a test
Users: Merlin
Add a link to approve: Yes
Usergroup : SpiritualMember[USA]

Hope you get the idea :banana:

hambil 03-29-2006 03:25 PM
How is access to "Private Forum, Spiritual Connections USA" set? If they can view it, but not post or create threads, then they won't get the message until they try to create a thread or post.

bada_bing 03-29-2006 03:33 PM
Nice idea will reserve for future use

GamerzWorld 03-29-2006 04:18 PM
Quote:
Originally Posted by hambil
How is access to "Private Forum, Spiritual Connections USA" set? If they can view it, but not post or create threads, then they won't get the message until they try to create a thread or post.
Is there no way that when they enter they try to enter the forum it gives the message?

hambil 03-29-2006 05:12 PM
Quote:
Originally Posted by GamerzWorld
Is there no way that when they enter they try to enter the forum it gives the message?
I believe the problem is a vBulletin problem. If the forum is visible they can enter it. If it isn't visible they don't even see it. If you mark it as not visible and they try to access it via a bookmark or other url, they will get the message.

GamerzWorld 03-29-2006 06:26 PM
Quote:
Originally Posted by hambil
I believe the problem is a vBulletin problem. If the forum is visible they can enter it. If it isn't visible they don't even see it. If you mark it as not visible and they try to access it via a bookmark or other url, they will get the message.
Cant seem to get it to work >.< Doesnt seem to be added

p.s. is it possible to make users apply for a usergroup in the error rather than use this system

hambil 03-29-2006 06:29 PM
Quote:
Originally Posted by GamerzWorld
Cant seem to get it to work >.< Doesnt seem to be added
If you want to give me access I can take a look at your site and see what the problem is. Or you can give me some screen shots of usergroup/forum permissions, and your vbAccessDenied setup and I'll see if I can spot the problem.

hambil 03-29-2006 06:47 PM
Quote:
Originally Posted by GamerzWorld
Cant seem to get it to work >.< Doesnt seem to be added

p.s. is it possible to make users apply for a usergroup in the error rather than use this system
It should be. Just include your own bbcode link in the error. The easiest way is to find the button/link that does the work in vBulletin, and mimick the url it is using.

GamerzWorld 03-29-2006 07:08 PM
Quote:
Originally Posted by hambil
If you want to give me access I can take a look at your site and see what the problem is. Or you can give me some screen shots of usergroup/forum permissions, and your vbAccessDenied setup and I'll see if I can spot the problem.
WIll pm you my IM contacts and give you admin access on account registerd :banana:

hambil 03-29-2006 07:27 PM
Thanks to Gamerz I've realized that vbAccessDenied needs integration with vBulletin's group functions. I'll add this. I also plan on adding a new {matchlist} subsitution variable, that will list all users with matching ips to the one requesting access. Should be done by the weekend :)

pugmy 03-29-2006 07:56 PM
great idea. it seems very useful.

ive encountered an error after installing it and trying to login. any idea?

Code:
Invalid SQL:

        SELECT * FROM accessdenied_message
        WHERE usergroupid = 1
        AND forumid =
        AND (script = 'index(*)' OR script = '*');

MySQL Error  : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server
version for the right syntax to use near 'AND (script = 'index(*)' OR script = '*')' at line 4
Error Number : 1064

hambil 03-29-2006 07:58 PM
Well, you've got a blank forumid. What exactly are you doing when you get this message?

hambil 03-29-2006 07:59 PM
Anyway, it's a bug either way. I'll fix it and reupload in a bit.

pugmy 03-29-2006 08:02 PM
I was tying to access index.php for logging in. Then the sql error popped. After the installation, I haven't changed any setting for vbAccessDenied. I just installed it and tried to log in before configuring the hack.

hambil 03-29-2006 08:06 PM
Very odd. The hack is only called when the system is about to display an access denied message.

pugmy 03-29-2006 08:12 PM
Accessing index.php somehow checked your code. I got the error even after I deactivated the hack from "vbAccessDenied Settings" page. So i had to disable the product temporarily until I find a solution.

alluidh 03-29-2006 08:15 PM
Hi Hambil
Is it OK to translate your powerful modification into german and gave the phrases to the members on vbhacks-germany.com?

hambil 03-29-2006 08:17 PM
Quote:
Originally Posted by pugmy
Accessing index.php somehow checked your code. I got the error even after I deactivated the hack from "vbAccessDenied Settings" page. So i had to disable the product temporarily until I find a solution.
Okay, I made a change that should fix it - download the new zip and reinstall. Perhaps it will now uncover the real error :)

hambil 03-29-2006 08:18 PM
Quote:
Originally Posted by alluidh
Hi Hambil
Is it OK to translate your powerful modification into german and gave the phrases to the members on vbhacks-germany.com?
I'd be honored. Thank you :)

alluidh 03-29-2006 08:19 PM
I had to thank you

pugmy 03-29-2006 08:20 PM
i forgot to mention but unregistered users can't view my forum. perhaps thats the cause of it?

edit: oh awesome. ill try it right away.

hambil 03-29-2006 08:21 PM
Quote:
Originally Posted by pugmy
i forgot to mention but unregistered users can't view my forum. perhaps thats the cause of it?

edit: oh awesome. ill try it right away.
Could be. Very interesting.

pugmy 03-29-2006 08:31 PM
This time, it properly inserted the forumid, but still ive got the sql error.

Code:
Invalid SQL:

                SELECT * FROM accessdenied_message
                WHERE usergroupid = 1
                AND forumid = 0
                AND (script = 'index(*)' OR script = '*' OR script = 'index(*)';

MySQL Error  : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server
version for the right syntax to use near '' at line 4
hmm weird.

hambil 03-29-2006 08:39 PM
Hey! That's the sql bug I fixed in version 1.1. How did that creep back in? Dang - sorry folks. I've updated the zip again. Try now.

pugmy 03-29-2006 08:41 PM
the sql error disappeared when i created a vbaccessdenied page for unregistered users accessing index.php. however, this makes it unable for them to login in the first place.

edit. okidoki. thanks for the quick response.

pugmy 03-29-2006 08:48 PM
It seems it's working great now.
Thanks for the quick fix!

hambil 03-29-2006 08:49 PM
Quote:
Originally Posted by pugmy
It seems it's working great now.
Thanks for the quick fix!
You're welcome. Now how about that install button... ;)


All times are GMT. The time now is 04:47 PM.
Page 1 of 4 1 23 Last »
Show 40 post(s) from this thread on one page

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01332 seconds
  • Memory Usage 1,827KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (13)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 
Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete