For everyone getting errors similar to the following from xiphoid's update
Code:
Database error in vBulletin 2.3.0:
Invalid SQL:
SELECT security,forumpass,passtimeout
FROM forum
WHERE forumid =
The problem is that $forumid isnt in single quotes, example, instead of
Code:
Open up: root/showthread.php
Find:
-----------------------------------------------------------
eval("dooutput(\"".gettemplate("showthread")."\");");
-----------------------------------------------------------
Replace with:
-----------------------------------------------------------
// Showthread Password Protection Code
// Updated by Scott
$forumid = $foruminfo['forumid'];
$seccheck = $DB_site->query_first("
SELECT security,forumpass,passtimeout
FROM forum
WHERE forumid = $forumid
");
The above code is wrong, use the code below instead of the above from the readme.
The only difference is '$forumid' now has quotes around it. Hope that helps yas
Code:
Open up: root/showthread.php
Find:
-----------------------------------------------------------
eval("dooutput(\"".gettemplate("showthread")."\");");
-----------------------------------------------------------
Replace with:
-----------------------------------------------------------
// Showthread Password Protection Code
// Updated by Scott
$forumid = $foruminfo['forumid'];
$seccheck = $DB_site->query_first("
SELECT security,forumpass,passtimeout
FROM forum
WHERE forumid = '$forumid'
");
I have installed this on a 2.3.0 vBulletin & can see no problems (other than the above which is now corrected) with the hack.
But then again I've only installed the hack from xiphoid's 1.2 version so I dont know what the bug was with Shaolyen's 1.1 version.
If someone can tell me how to reproduce the flaw I'll test it out & let yas know if it works. If anyone is reluctant to tell me how to reproduce the flaw will you pleeeez see does it work on the new updated instructions, ie v1.2, I need to know whether this is secure or not before I use it.
This is a great hack Shaolyen, I'll be definitely clicking install if this works, thanks!