vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 2.x Beta Releases (https://vborg.vbsupport.ru/forumdisplay.php?f=5)
-   -   create styles / templates / replacements through Mod CP by usergroup (https://vborg.vbsupport.ru/showthread.php?t=49798)

mx3 03-07-2003 10:00 PM

create styles / templates / replacements through Mod CP by usergroup
 
/////

members can create styles/templates/replacements through Mod CP by usergroup

/////

By mx3

/////

Creds to Storm for partial hacking, help, and support.

/////

What this hack does is basically let anyone in the usergroup you
specify add/remove/edit styles, replacements, and templates through
the mod cp (obviously the member must have access to the mod cp, so
make sure the group you specify is either the mod group or super mod group)

/////

Files to edit:

mod/index.php

Files to add:

mod/style.php
mod/template.php
mod/replacement.php

/////
this is my first hack! i hope that you like it! please click the install button if you use it!

mx3 03-08-2003 01:42 AM

screenshot of mod cp

none others are really needed, its the same as in the admin cp only its now in the mod cp...

FleaBag 03-08-2003 02:55 AM

Nice hack, a similar one came out in the past - but the problem that existed there also exists here, the user could delete your entire database with this kind of access. If you 100% trust your moderator not to do this then I guesse it's great, but then again if you 100% trust them, you might as well make them an admin.

mx3 03-08-2003 02:57 AM

I see your point. i will try to revise this hack and fix that prob. :D


uh-oh...this hack worked for me before...for some reason i'm getting parse errors noww :eek: no one install! it is unstable! i'll try to fix, if a mod sees this delete this hack out of the DB and forum! i'll post it again when it is fixed!

Xenon 03-08-2003 10:24 AM

have deleted it out of the db and moved it to the beta hacks forum.

as for security: change the hack in a way that these mods CAN NOT edit phpinclude templates

mx3 03-08-2003 01:36 PM

thank you, xenon, i will try. i'm still learning php, i did'nt even really know it when i made the hack. Storm helped a lot, as it says in the credits.

SZ|TalonKarrde 03-08-2003 06:30 PM

Brad fixed his hack to remove the security hole, but then, as far as I know, he either lost interest in the hack and never updated it, or lost the data. I'll bug him about how to fix it later today.

Link14716 03-09-2003 10:36 PM

Code:

..... AND title!='phpinclude' ......

blackice912 03-10-2003 06:10 AM

Quote:

Originally posted by SZ|TalonKarrde
Brad fixed his hack to remove the security hole, but then, as far as I know, he either lost interest in the hack and never updated it, or lost the data. I'll bug him about how to fix it later today.
I think I still have the files, but I don't think I ever fixed the hole.

Though all I use it for now is to allow stupid people that have hosted forums at Stardust One access to it with a very big warning/usage agreement that will make them not want to tamper with it.

Xenon 03-10-2003 11:52 AM

Link: you should also say where to put this ;)
you have to make sure, that phpinclude wouldn't be displayed, and also cannot be edited through urlmodifications also ;)


All times are GMT. The time now is 09:07 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.00991 seconds
  • Memory Usage 1,729KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_code_printable
  • (1)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete