Simple vB User login and access control on non vB pages

Hack Description

This is a cutdown version of the user authentication and access control system I use on the non vB pages on my website.

This uses the vB 3.5 login system to log you in and out. It allows you to move between your forums and other pages on your site while remaining logged in.

It allows you to do things such as restrict pages by usergroup, display different content depending on a user being logged in or not.
For example, you can have banner Adds displying to non members only, and/or let members access to specific content.

Ive cut it down to the bare minimum that it needs to work, no fancy stuff such as avatars, PM's, or even formating.

I will try and offer support, but work and family commitments mean I dont have much free time.

This code is a mix of my own, and pieces I have used from other hacks that are floating around.

This script has been confirmed as working on

• vB 3.5.x - All Versions

Changelog

Version 1.30 (24th April 2007)

• Fixed - // in paths bug
• Fixed - Javascript warning in some browsers
• Fixed - Tidied up some code

Version 1.20 (2nd December 2006)

• Fixed Logout incorrect path bug
• Made change to reduce compatibility problems with foreign scripts

Version 1.10 (4th Feb 2006)

• Changed login_inc.php so you only need to edit path in one place now.
• Added more commenting to login_inc.php
• Added usage instructions to instructions file
• Added troubleshooting guide with all common problems and fixes to instructions file.

Note: It is NOT necessary to update from 1.0 to 1.10.
There is no functionality changes or bug fixes between these 2 releases.

Version 1.0 (17th November 2005)

• Initial Release

Deluxe Version of this hack is now available
Has Avatars, PM's, Number of Posts etc.

Click Here


Click on Install
If you have this script installed then please click on the install link because;

• You will get notified if any security issues are reported.
• You will get notified when there are any upgrades to this script
• It gives me a warm fuzzy feeling and motivates me to develop more

Donations
First of all, to be clear. This script is 100% free.

However if you feel an urge to donate I'm not going to say no.
Donations can be made at http://www.billspaintball.com/vb3/bd_donate.php

[Billspaintball]

Originally Posted by grayloon

Since the chdir code must be first on the page, how do you handle the sending of headers (like cookies)?

As long as its all before any page output there shouldant be any problems.

[Billspaintball]

Originally Posted by quadude

Something maybe worth mentioning is that to prevent script issues from happenning(due to path changes) You can do something like this:

$cwd = getcwd();
chdir('/path/to/your/forums'); 
require_once('/path/to/your/forums/global.php'); 
chdir($cwd);

Yeah I should have done that I spose.

[Zidane007nl]

Good hack, got it running successfully finally.
But when someone who is banned on my forums is watching the website and is still logged in they get the forum banned message (which doesn't look well).

[Billspaintball]

Originally Posted by Zidane007nl

Good hack, got it running successfully finally.
But when someone who is banned on my forums is watching the website and is still logged in they get the forum banned message (which doesn't look well).

I will look at that and see if I can do something about that.

[Sparky_s]

Works perfect on 3.6.0.

I added a little code in the login_irc.php to inform users that they can proceed to the forums.

//Added by Sparky-s 25/08/06
echo "<a href=\"".$forumpath."index.php";
echo "\">";
echo "<font size=\"1\" face=\"verdana\">You may click to proceed to the forums.</font></a>
";

echo "<font size=\"1\" face=\"verdana\">You may also </font></a>
";

The last bit is to lead to the log out link.

I'm mainly using this as a cover page for users with access masks before they get to the forum.

I'm not sure it it has been altered already like this, as I couldn't be bothered reading 14 pages.

I assume I'm allowed edit the login_inc file?
Thanks.

Sparky

[Bahawolf2]

Can anyone provide me with any assistance ot my problem above?

When i try to login it ends up going to

link.com/support/forums/login.php

instead of link.com/forums/login.php

[UtilityGeek]

I'm using this script with no issues however when I close the forums down, any non-vb page with the global.php included on it gives me the forum down message. Is there a way to check this (forum up/down) and display something else instead?

[Billspaintball]

Originally Posted by Sparky_s

I assume I'm allowed edit the login_inc file?
Thanks.

Sparky

Sure can!

[Billspaintball]

Originally Posted by UtilityGeek

I'm using this script with no issues however when I close the forums down, any non-vb page with the global.php included on it gives me the forum down message. Is there a way to check this (forum up/down) and display something else instead?

Problem with that, is if your using your vB login so you can do access control on your site like many are, you will loose that access control.
You would have anyone including guests having unrestricted access.

[ocdotcom]

Thanks very much - Im having fun playing with this