vb.org Archive - User Privileges on non-vB pages

Page 1 of 3

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)

- - User Privileges on non-vB pages (https://vborg.vbsupport.ru/showthread.php?t=49175)

inthezone

02-21-2003 08:44 PM

User Privileges on non-vB pages

I am looking to make certain non-vB pages on my site accessible on various levels (i.e. Certain parts are displayed for Registered Users, additional parts are displayed for Mods/Admins, and Guests are brought to the vB login screen,) using the vBulletin cookie, but I have no idea about:

1) How to require the cookie for access.

2) How to make certain parts accessible to certain user-levels.

Any help would be greatly appreciated. Thanks

Dean C

02-22-2003 10:53 AM

Try these two hacks maybe?

http://www.vbulletin.org/hacks/index...ack&hackid=548

http://www.vbulletin.org/hacks/index...ack&hackid=282

- miSt

inthezone

02-22-2003 05:11 PM

Those seem to use sessions, and I am looking to use cookies so users don't have to re-login every time. I want to have users login/register from the vB board itself, while the non-vB pages verify the cookie generated by vB. Is using the vB cookie on non-vB pages relatively safe, or is it opening a potential 'can of worms' of security risks?

Dean C

02-22-2003 06:06 PM

Saw something about cookies in this thread:

https://vborg.vbsupport.ru/showthrea...threadid=43014

inthezone

02-23-2003 08:07 PM

That seems to just be a login portal for vB, but doesn't use the cookie for access to non-vB pages. What I am looking for (not a "hack" per se) is something that will allow me to do this on non-vB pages:

PHP Code:


		
			
//Not using literal PHP syntax



if (vBulletin cookie is present)

{



if (user is a registered user)

{echo Regular user content;}

elseif (user is a moderator)

{echo Mod content;}

elseif (user in an administrator)

{echo Admin-only content;}



}



else {echo "You must be a registered user to view this page. Please login or register";}

Logician

02-24-2003 09:27 AM

I think you'll like WebTemplates

inthezone

02-25-2003 01:15 AM

I am not really looking to hack up my vB, especially since vB3 is due out any month now. I noticed this bit of code in the thread for your hack:

PHP Code:


		
			
<?php

// Default Information - Start with this

error_reporting(7);



$templatesused='forumhome_welcometext,forumhome_logoutcode,forumhome_newposts,forumhome_todayposts,forumhome_logincode';



require('./global.php');



$permissions=getpermissions();

if (!$permissions['canview']) {

    show_nopermission();

}

// Default Information - End



// if user is know, then welcome

if ($bbuserinfo['userid']!=0) {

  $username=$bbuserinfo['username'];

  eval("\$welcometext = \"".gettemplate('forumhome_welcometext')."\";");

  eval("\$logincode = \"".gettemplate('forumhome_logoutcode')."\";");

  eval("\$newposts = \"".gettemplate('forumhome_newposts')."\";");



} else {

  $welcometext = "";

  eval("\$newposts = \"".gettemplate('forumhome_todayposts')."\";");

  eval("\$logincode = \"".gettemplate('forumhome_logincode')."\";");

}



eval("dooutput(\"".gettemplate('home')."\");");





?>

Would something like this be adequate for permissions on non-vB pages?

Logician

02-25-2003 03:16 PM

If you are ready to manually edit/update permissions per .php file without any user interface for administration, yes you can just insert:

PHP Code:


		
			
require('./global.php');

at the begining of your .php file (assumed its in the forum dir), then check the permissions with "if" commands like:

PHP Code:


		
			
if ($bbuserinfo['userid']>0) 

{

//do something

}

else

{

//do another thing

}

etc.

inthezone

02-25-2003 07:24 PM

Is it possible to do this using a file that is not in my forums directory?

My directory structure is:

public_html
-forums
---admin
---images
---mod

I'm getting this error

PHP Code:


		
			
Warning: main() [function.main]: Unable to access ./admin/config.php in /home/virtual/www/public_html/forums/global.php on line 129



Warning: main(./admin/config.php) [function.main]: failed to create stream: No such file or directory in /home/virtual/www/public_html/forums/global.php on line 129

and I'm using this code to get the global.php file:

PHP Code:


		
			
require('/home/virtual/www/public_html/forums/global.php');

Logician

02-25-2003 07:34 PM

PHP Code:


		
			
chdir('/home/virtual/www/public_html/forums/');

require('./global.php');

All times are GMT. The time now is 12:36 AM.

Page 1 of 3

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.02572 seconds Memory Usage 1,755KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (7)bbcode_php_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (2)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: