The Arcive of Official vBulletin Modifications Site.It is not a VB3 engine, just a parsed copy! |
|
#1
|
|||
|
|||
Register someone via Querystring?
Would it be possible to write a very little php script which is using vBulletin classes to register someone via querystring?
For example calling this: domain.com/forum/regme.php?username=test&pw=testy Would add the given user to the vBulletin Database by using the vBulletin class for it. If it's possible, which class do I have to use? Thanks in advance! |
#2
|
||||
|
||||
You would have to use the vB_DataManager_User class.
This article may help you: https://vborg.vbsupport.ru/showthread.php?t=82836 |
#3
|
|||
|
|||
I would be carefull with that, because it would also allow an atacker to create thousands of user accounts in just a few minutes.
|
#4
|
|||
|
|||
Thanks for the link!
The script won't be public, I just need something like a hook for an ASP.NET Application to create users on a vBulletin forum. Best regards, reteep |
#5
|
||||
|
||||
Public != safe! Even so, add a floodcheck.
|
#6
|
|||
|
|||
Not public?
You mean public can not access the script, or would it not be accessible because you hope nobody will ever find the script? |
#7
|
||||
|
||||
Add several levels of security. Place it in an obscure location (for example, I once didn't want anyone to find pictures except people I wanted so I placed them in... /pictures/nobody/sees/these/asdf/never/again/) so it would be hard to guess. Then place .htaccess on the directory so you have to physically login to view the file. And add a file password (pass=unadd7364589 for example) and md5() it inside of the file and store the correct passwords md5() value. You could do more for security too.
|
#8
|
|||
|
|||
Thanks for the hints guys!
In fact I don't think anyone would ever guess the location while directory listing is disabled. But that password/md5 method sounds like a comfortable security measure. Thanks for all the input! |
Thread Tools | |
Display Modes | |
|
|
X vBulletin 3.8.12 by vBS Debug Information | |
---|---|
|
|
More Information | |
Template Usage:
Phrase Groups Available:
|
Included Files:
Hooks Called:
|