vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   Approving new users from showthread? (https://vborg.vbsupport.ru/showthread.php?t=170527)

saf-t scissors 02-15-2008 01:41 AM

Approving new users from showthread?
 
I've been kicking around a couple of ideas on how to streamline our new user applications. Currently, if you're requiring moderator approval on new accounts, you first have to log into the admincp and see if there are any waiting. If there are, you have to open each profile, check the information, note which users you're going to keep and which you're going to kick, then go back, check the appropriate boxes, and click the button to process the new users.

It's a bit complicated, especially when you're trying to go through a dozen accounts at a time.

What I've been thinking about is creating a new thread and populating it with the new user's info after registration. Easy enough, and several mods out there already do it. But I'm thinking that I can go ahead and put two buttons in the first post -- approve or delete the account. Show the buttons if the user is an admin, and check the user's permissions again before processing.

Even still, I'm a little uneasy about the potential security hole it opens up. I mean, vB is prompting for passwords on some moderator functions. There are good reasons why usergroup tools are sequestered away in the admincp.

I guess I could write a plugin that would replace the stock user moderation panel in admincp, but it looks like the lack of hooks is going to make that one more complicated. Creating a new thread makes for a tidy introduction section as well.

Prudent or paranoid?

Mosh 02-15-2008 03:20 AM

Quote:

Originally Posted by saf-t scissors (Post 1443385)
I've been kicking around a couple of ideas on how to streamline our new user applications. Currently, if you're requiring moderator approval on new accounts, you first have to log into the admincp and see if there are any waiting. If there are, you have to open each profile, check the information, note which users you're going to keep and which you're going to kick, then go back, check the appropriate boxes, and click the button to process the new users.

It's a bit complicated, especially when you're trying to go through a dozen accounts at a time.

What I've been thinking about is creating a new thread and populating it with the new user's info after registration. Easy enough, and several mods out there already do it. But I'm thinking that I can go ahead and put two buttons in the first post -- approve or delete the account. Show the buttons if the user is an admin, and check the user's permissions again before processing.

Even still, I'm a little uneasy about the potential security hole it opens up. I mean, vB is prompting for passwords on some moderator functions. There are good reasons why usergroup tools are sequestered away in the admincp.

I guess I could write a plugin that would replace the stock user moderation panel in admincp, but it looks like the lack of hooks is going to make that one more complicated. Creating a new thread makes for a tidy introduction section as well.

Prudent or paranoid?

I may have a solution to your problem, check out my Moderate New User Registrations (ModCP Option) - v3.7.x here and v3.6.x here.

It is not exactly what you want (read the threads first, as it will do what you need it to do), but uses all vB functions and there are no security holes in the hack :)

saf-t scissors 02-15-2008 08:59 PM

Quote:

Originally Posted by Mosh (Post 1443410)
It is not exactly what you want (read the threads first, as it will do what you need it to do), but uses all vB functions and there are no security holes in the hack :)

Thanks, but I'm not sure where that changes anything. It just gives more users the ability to suffer through the crappy stock approval process.

The approval process is really what I'm looking to change. When that panel opens now, all you have are the usernames and radio buttons to approve or delete them. You've got to open up each profile, take a look at the IP address, check the profile information, etc, then go back and approve the account.


All times are GMT. The time now is 01:57 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01559 seconds
  • Memory Usage 1,724KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (3)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete