Register someone via Querystring?

[reteep]

Would it be possible to write a very little php script which is using vBulletin classes to register someone via querystring?

For example calling this:
domain.com/forum/regme.php?username=test&pw=testy

Would add the given user to the vBulletin Database by using the vBulletin class for it.

If it's possible, which class do I have to use?

Thanks in advance!

[King Kovifor]

You would have to use the vB_DataManager_User class.

This article may help you:

https://vborg.vbsupport.ru/showthread.php?t=82836

[Marco van Herwaarden]

I would be carefull with that, because it would also allow an atacker to create thousands of user accounts in just a few minutes.

[reteep]

Thanks for the link!

The script won't be public, I just need something like a hook for an ASP.NET Application to create users on a vBulletin forum.

Best regards,
reteep

[RedTyger]

Public != safe! Even so, add a floodcheck.

[Marco van Herwaarden]

Not public?

You mean public can not access the script, or would it not be accessible because you hope nobody will ever find the script?

[King Kovifor]

Add several levels of security. Place it in an obscure location (for example, I once didn't want anyone to find pictures except people I wanted so I placed them in... /pictures/nobody/sees/these/asdf/never/again/) so it would be hard to guess. Then place .htaccess on the directory so you have to physically login to view the file. And add a file password (pass=unadd7364589 for example) and md5() it inside of the file and store the correct passwords md5() value. You could do more for security too.

[reteep]

Thanks for the hints guys!

In fact I don't think anyone would ever guess the location while directory listing is disabled. But that password/md5 method sounds like a comfortable security measure.

Thanks for all the input!