vb.org Archive - vbulletin auth external page - is this enough for admin area?

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vB4 Programming Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=252)

- - vbulletin auth external page - is this enough for admin area? (https://vborg.vbsupport.ru/showthread.php?t=265484)

forcerm

06-19-2011 07:15 PM

vbulletin auth external page - is this enough for admin area?

I have built my website around vbulletin, i use the include globals.php hack so that i can work with vb on external pages.

I also have an admin area to go with this, now rather than create a separate login to secure this i decided to limit admin area access to the vbulletin admin usergroup.

PHP Code:


		
			
       if($this->vbulletin->getUserGroupId()!="6")

               redirect(base_url());     



        //admin code here...

So this is saying, if usergroup isn't 6, then redirect to the base_url (home) or continue...

This does work, but since it's not actually checking if the user is logged in, rather it's just looking for a usergroup id... is it secure enough?

If the user is not logged in, what will it return? NULL? 0?

Eric	06-19-2011 07:18 PM

The Unregistered/Not Logged In usergroup is 0. So if a user is not logged in, then 0 should be returned.

dionak

06-25-2011 11:40 AM

I tried the quoted example, but I think I'm not using it in the right context, because PHP doesn't know what "$this" is referring to. Also, it is not recognizing the "redirect()" function.

(I have created an external page based on the instructions in this article:

https://vborg.vbsupport.ru/showthrea...own+page+Lynne

-and it was working correctly without this modification.)

I tried modifying the conditional to this:

$vbulletin->userinfo->usergroupid

and that doesn't give an errror, but it also doesn't return anything.

I also tested just the redirect function, and that doesn't work either. I think I need something like "print_standard_redirect", but could someone point me to an article or tutorial for that, as I've never done one on my own before.

Thanks for any help.

dionak

06-27-2011 11:39 AM

Quote:

Originally Posted by dionak (Post 2212539)

...I tried modifying the conditional to this:

$vbulletin->userinfo->usergroupid

and that doesn't give an errror, but it also doesn't return anything.

I also tested just the redirect function, and that doesn't work either. I think I need something like "print_standard_redirect", but could someone point me to an article or tutorial for that, as I've never done one on my own before...

I figured it out--just needed some time away from the problem.

The usergroupid is in:

$vbulletin->userinfo['usergroupid']

(userinfo is just an array inside the object, not a whole other object.)

And I found a good, concise tutorial that included redirection here:

https://vborg.vbsupport.ru/showthread.php?t=98009

All times are GMT. The time now is 07:19 AM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.00970 seconds Memory Usage 1,724KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_php_printable (1)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (4)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: