Thread: Integration with vBulletin - Facebook Connect - Update for Facebook PHP SDK (v.3.0.0)
View Single Post
  #192  
Old 10-31-2012, 12:33 PM
ChiNa ChiNa is offline
 
Join Date: Jul 2012
Posts: 457
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by blind-eddie View Post
Anyone else having this issue?
Thanks to blind-eddie for pointing this out and for PM me about this! Now I actually think this issue was the most shocking issues of all our online time! And I will try explain it exactly so you all know what you should be doing, and checking on this ADDON..

How could this happen??

My forum moderator called me and told me about this issue! I couldnt believe him, and even at one point I suspected him to be one of those people cursing in our forum, WHICH WAS A BIT NERV-Wracking..

Basicly our moderator logged into his account in the forum, and directly clicked on the "Facebook Connect" button for , , and he was now suddenly redirected and logged into another users account, which was assigned to the persons FACEBOOK account as well!

The button should not be be visible for Logged-in members.. and we did this 2-3 times again and again, still we were getting logged in as another USER! So hopefully this will be fixed! Else follow the steps I have provided below to hide the FACEBOOK CONNECT button from logged-in users..

This was all from me! Once again thanks to "blind-eddie " for poiting this out!
_____________________________________________


HERE IS A SAFETY TRICK, for the button to not be visible for logged in users:

Follow my steps
If you wanna use this addon, make sure to do the following thing, because this is not HIDDEN from the users as it should be! So after people login to the forum, the "FACEBOOK CONNECT" button is still visible in the forum, and this is what caused this issue!

So to hide it from Logged in members, there is a file called Install.html file inside the ZIP file..
Now on STEP 5, It tells you to add the following code in your footer:

It ask you to add this code in your navbar, below another code:
Code:
<!-- fbconnect -->
 $fbconnect_init 
 <!-- / fbconnect -->
Instead of that code, Add this code below the other in your footer template:

Add Code:
Code:
<if condition="$show['guest']">
<!-- fbconnect -->
 $fbconnect_init 
 <!-- / fbconnect -->
</if>
Thats it, This code makes the FACEBOOK CONNECT button only visible for GUESTS! Now no logged-in members can use it! Like what happend in our forum which caused that a member was logged into another persons facebook account and our forum!

So for your users safety and your forums safety use this instead. Untill this issue is fixed..

Regards ChiNa-Man
Reply With Quote
 
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01260 seconds
  • Memory Usage 1,775KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD_SHOWPOST
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code
  • (1)bbcode_quote
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_box
  • (1)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (1)post_thanks_postbit_info
  • (1)postbit
  • (1)postbit_onlinestatus
  • (1)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • reputationlevel
  • showthread
Included Files:
  • ./showpost.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showpost_start
  • bbcode_fetch_tags
  • bbcode_create
  • postbit_factory
  • showpost_post
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • showpost_complete