vb.org Archive
Page 1 of 2 1 2
Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.0 Beta Releases (https://vborg.vbsupport.ru/forumdisplay.php?f=34)
-   -   [3.0.7 to 3.0.3] De-anonymizing Reputation (https://vborg.vbsupport.ru/showthread.php?t=80291)

memobug 04-20-2005 10:00 PM
[3.0.7 to 3.0.3] De-anonymizing Reputation
 
Background: The existing vB Reputation System is anonymous, which is fine in a perfect world, but here on earth this can lead to problems: Some users abuse the system by reputation "sniping," and others could potentially abuse its anonymity by "signing" a different username to their negative reps and stir up even more trouble.

With that in mind, here is an ultra simple hack that removes the anonymity of reputation by "signing" reputation comments with the username.

One code modification to reputation.php. Installation & test time is under five minutes.

Right before this bit near line 192:

Code:
$DB_site->query("
INSERT INTO " . TABLE_PREFIX . "reputation (postid, reputation, userid, whoadded, reason, dateline)
VALUES ($postid, $score, $userid, $bbuserinfo[userid], '" . addslashes(fetch_censored_text($reason)) . "','" . TIMENOW . "')
");
Insert this
Code:
        $reason.=" ({$vbphrase[leftby]} {$bbuserinfo[username]})";
Now send a rep to a test account and check it out through the existing admincp tool: User Reputation ->View Reputation Comments (BTW - I always have to set the end date a day forward to catch all of today's reps on that query tool. I think it had a bug at one time)


Notes:
1. Screenshot? See attachment (the first reputation was left before I found the right phrase. The circled one is how it comes out.
2. You might also want to add something to your reputationbit template and/or your FAQ to let people know that the reputation system is not anonymous. This could go somewhere like this (new part in italics
Quote:
Originally Posted by reputationbit template
[your_comments_on_this_post]:<br />
NOTE: Your username will be automatically signed!<br />
3. A more involved hack might display something akin to what the admin can see by viewing reputation - seeing the sender's clickable username in a column of its own. The main reason I can't do that is I don't want to reveal the senders of past reps made under the anonymous system, but I'd agree it is the "right way."

Regards,

Matt

P.S. The attachments below are different colors 'cause they came from two different templates!

kall 04-21-2005 09:08 AM
Maybe I am missing something but...doesn't enabling the Group Permission 'Can See Who Left Reputation' kinda 'de anonymise' the reputation?

msimplay 04-21-2005 09:35 AM
thanks since i've disabled negative reputations my users would love to know who they recieve their comments / reputations from

One question since moderators and above can see reputation comments by default isn't there a way to make this available to normal users instead of having the name signed as then all previous comments would also show who the comments were left by as now as an admin i got two places where it shows who its left by

sabret00the 04-21-2005 09:46 AM
Quote:
Originally Posted by kall
Maybe I am missing something but...doesn't enabling the Group Permission 'Can See Who Left Reputation' kinda 'de anonymise' the reputation?
that's what i thought :happysad:

kall 04-21-2005 09:56 AM
Quote:
Originally Posted by sabret00the
that's what i thought :happysad:
*points at post above sabe's*

Maybe it was only enabled in our versions... :)

msimplay 04-21-2005 10:24 AM
its not enabled in 3.0 i had to change the templates around in which case i don't need this hack anymore either :P

Corriewf 04-21-2005 12:11 PM
Yeah, my members can see who gone and up and done it anyhow.... hmmm

Polo 04-21-2005 02:12 PM
nice.. thanks for the contribution to the community...

Paul M 04-21-2005 03:11 PM
Seeing who left rep comments is a standard feature of vB 3.0.x so I don't see what this is about. The comment "The existing vB Reputation System is anonymous" is simply not true.

deathemperor 04-21-2005 04:31 PM
lol is this a vb3 hack ? if yes then why it's in a beta of vb2 hacks ?!?


All times are GMT. The time now is 06:13 AM.
Page 1 of 2 1 2
Show 40 post(s) from this thread on one page

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01154 seconds
  • Memory Usage 1,738KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (3)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 
Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete