vb.org Archive - View Single Post - How to create your own vBulletin-powered page! (uses vB templates)

LaPiba · #**879** 11-24-2008, 11:02 PM

Hi,

I have a serious problem.

I made the following chat page; it is called parachat.php and this is the code:

Quote:

<?php

// ####################### SET PHP ENVIRONMENT ###########################
error_reporting(E_ALL & ~E_NOTICE);

// #################### DEFINE IMPORTANT CONSTANTS #######################
define('NO_REGISTER_GLOBALS', 1);
define('THIS_SCRIPT', 'parachat'); // change this depending on your filename

// ################### PRE-CACHE TEMPLATES AND DATA ######################
// get special phrase groups
$phrasegroups = array(

);

// get special data templates from the datastore
$specialtemplates = array(

);

// pre-cache templates used by all actions
$globaltemplates = array(
'parachat',
);

// pre-cache templates used by specific actions
$actiontemplates = array(

);

// ######################### REQUIRE BACK-END ############################
require_once('./global.php');

// ################################################## #####################
// ######################## START MAIN SCRIPT ############################
// ################################################## #####################

$nombre = $vbulletin->userinfo['username'];

$navbits = array();
$navbits[$parent] = '?Chat!';

$navbits = construct_navbits($navbits);
eval('$navbar = "' . fetch_template('navbar') . '";');
eval('print_output("' . fetch_template('parachat') . '");');

?>

The "parachat" template has conditionals... it is something like this:

Quote:

$stylevar[htmldoctype]
<html dir="$stylevar[textdirection]" lang="$stylevar[languagecode]">
<head>
<title>$vboptions[bbtitle]</title>
$headinclude
</head>
<body>
$header

$navbar

<table class="tborder" cellpadding="$stylevar[cellpadding]" cellspacing="$stylevar[cellspacing]" border="0" width="100%" align="center">
<tr>
<td class="alt1">
<if condition="$bbuserinfo['usergroupid'] != 1 AND
$bbuserinfo['usergroupid'] != 2 AND
$bbuserinfo['usergroupid'] != 3 AND $bbuserinfo['usergroupid'] != 4 AND $bbuserinfo['usergroupid'] != 10 AND $bbuserinfo['usergroupid'] != 18 AND $bbuserinfo['usergroupid'] != 19 AND $bbuserinfo['usergroupid'] != 21">

Here it comes a chat applet.

<else />
Here it comes a message for non authorized usergroups.
<br /><br />
<if condition="$bbuserinfo['usergroupid'] == 2">
Here another message, specifically for usergroup 2 which is non-authorized for chat in my forum.
<br /><br />
</if>
</if>
</td>
</tr>
</table>
<br /><br />
$footer
</body>
</html>

However, one member managed to enter that page, although she is in a non-authorized usergroup (usergroup 21).

Is this a problem with the php page, or with the use of conditionals?

Could anybody help me? Thanky you in advance.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01120 seconds Memory Usage 1,775KB Queries Executed 11 (?)
More Information
Template Usage: (1)SHOWTHREAD_SHOWPOST (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (2)bbcode_quote (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_box (1)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (1)post_thanks_postbit_info (1)postbit (1)postbit_onlinestatus (1)postbit_wrapper (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit reputationlevel showthread	Included Files: ./showpost.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_postinfo_query fetch_postinfo fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showpost_start bbcode_fetch_tags bbcode_create postbit_factory showpost_post postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start showpost_complete
Messages: