Major Additions - VB image Hosting

VB Image Hosting Version 1.0.1

This is the port for my hack to vb 3.6.x
check it for vb 3.5.x here

A New installer replaced the old one so you should not face any problems with database

NOTE :
People who were using vbimghost in vb 3.5.x and moved to vb 3.6.0 MAKE sure that you have vbimghost 1.4.1 Since this port will only support upgrading from that ver only
People who do a fresh install use this ver.

Requirements:

1. requires GD 2.0.1 or later (2.0.28 or later is recommended).
2. PHP ver 4.3.x or later (newer ver is better).

Introduction:

What does it do ?

VB Image Hosting is a similar feature to imageshak and photopoket and online free image hosting, but this is for your members. it will allow them to upload and host their images on your servers, you can still manage the permissions and set the number of files for each group.

Main Features:

• Image hosting
• Restrict # of file upload for each group
• Allow/disallow group from upload
• Restrict file uploaded based on file extension, dimensions and size
• Users can manage their uploaded files
• Users can set the view permission for each uploaded images
• Admin can mange all members images
• Admin can set the number of images/users per page.
• Admin can mange images uploaded by the members
• Admin can set the default upload permission
• Thumbnail system admin can turn it on/off.
• Allow multiple uploads.
• Admin can set upload slots for each group
• Admin can recreate thumbnails from admin cp
• Fully using the phrase system.

Time required to install

• 1- 2 min max.

Update instruction :
Just replace the old files with the new ones and import the product file don't forget to select overwrite.

History:

1.0.0:

• inital release contains everytverg in 1.4.1 ver.

1.0.1:

• Fix security bug with delete image.
• fix some minor mysql problems.

Download Tracking:
1.0.0 : 3886


Known Issues:

no known issues.

Screen shscreenshot.zip

screenshot.zip.

NOTE:
before you post any error here :
Set that path to your forums correctly in the vbimghost options.
if you getting the error ""supplied argument is not a valid"
that's because you didn't set the path correctly

And for all the people asking when is the next release it will be in 2007 not this month .. due to some problems in real life ..



URGENT ISSUES:

you may contact me on msn id : waiel[at]waieleid.com
replace [at] with @ ok? -_-

[Merriweather]

I found a glitch -- when I posted an announcement in my forums, the postbit that shows how many images I have was broken (it just showed empty parenthesis instead of the number of photos with the link). How can I fix it?

[Gweedo]

I'm having an issue with watermarks. I have set the directory to "777" and the text watermark works just fine.

However, the "image" watermark does not work.

• Permissions set to 777
• Image in .jpg format is in folder
• CP is set to image and file name matches
• No error messages are displayed
• Image uploads, but no watermark
• Text watermark works fine

Any idea about what my problem may be?

Thanks!

[John1uk]

Installed.....But i have a problem... how do i set user permissions, as it won't let me upload pics as i don't have permission...

Thanx

[blind-eddie]

admincp/vbimagehost...on the left, make sure its on & set your settings, also..
admincp/usergroup/usergroupmanager....Go through each usergroup, scroll down, you will see, vbimagehost, set settings on each usergroup...

[John1uk]

Your a star mate cheers

[111]

Originally Posted by Gweedo

edit: Gotcha, thanks.


I have a new error now. I changed the watermark from text to image and now I get this:


The watermark image is in the vbimagehost folder where the uploaded images are stored.

If I turn off the watermark I get no errors at all, so this is a problem related to the watermark

Thanks,
Matt

u must replace the home\user with your real username that u access the web then the watermark will work (i had the same problem)

[digital3]

When I try uploading an image I simply get a blank page. The install was 100% perfect and the upload directory was CHMOD 777. I will try this mod later once it is bug free.

[redwinger]

I get this message when uploading. Uploaded file is not an image
Now it is a image and is within the size ranges. Also I set my thumbnails down and they are still the same size? Where do i rebuild the thumbnails?

[fly]

^You people (or your host) are doing something wrong. It isn't the hack...

[oatsy]

Had a 3.6.4 forum hacked (as in Turkish hackers, not as in a deliberate VB mod) a couple of days ago with a hack called cmdhack, and there are some signs that it came in through a previous version of Image Hosting - version 1.3.1. I was looking here to see what the most current version is. I see 1.3.1 is outdated but I'm not sure if the recent updates change anything about security (if indeed Image Hosting was the way they got in.

The reason I think Image Hosting may have been the route in is because there were 3 new files appeared in the 'imagehosting' directory at about the time the site was hacked. There should only be image files and an index.html (with nothing in it) in there, but we had a new index file plus 2 php files. Couldn't open any of them by ftp for editing - access denied. We were able to delete the folder and replace it with a backup and the forums are up and running again now once we fixed the problem in the db - see below.

I'm still puzzled about how those files got there though. The Image Hosting feature is set to a) only accept jpg, gif, png, and bmp files. I've tried txt files etc and it won't accept them. b) only trusted members of the forum are enabled on the Image Hosting system - general public don't have permissions. All forums have HTML disabled.

I've disabled the Image Hosting hack from all users for now. I'd appreciate any thoughts on how this might have happened. Can a script be disguised as an image file? Could one of the trusted members have innocently uploaded what he thought was a clean image file but was actually the hacker's script?

I'd like to keep Image Hosting on the site because it's a terrific hack.

What happens with this cmdhack is that as soon as the forums try to load you get redirected straight to a page on the hackers site ('Turkish Hackers blah blah' rubbish).

If you do get caught with it, it's easy to get rid off as long as you have access to phpmyadmin:

Long story short ... the hack changed a couple of fields in the top level publicly accessible forum (the Category in other words). The Title field text was replaced with a refresh command and the description field had the URL details to the hackers page. As soon as the forums load the refresh/redirect command kicks you to the hackers URL after a second or two.

No new pages were added to the site - the 'You've been hacked' page was on the hackers remote site. Easy enough to fix by going into phpmyadmin, listing the 'forum' table and look for the forum that has the wrong info in it. Replace the hackers text with the correct text and off you go. You can't edit it in the admin cp because as soon as you try to list the forums in Forum Manager the redirect kicks in again.

Thanks