Registration Gives Full Cookie

[Mistah Roth]

I've noticed something strange with vBulletin. If you register, it sets your session and lastvisit information in the cookie, but not your userid or password. The userid and password only get set in the cookie after you logon.

Where can you edit it in vb 3.5.4 that makes it so registration also sets this information?

[bradsears]

I am interested in this as well.

[catalin8]

me 3

[Mistah Roth]

Bumped, still need this.

[bradsears]

I'm interested in it because I am registering via the data manager. I'd just like to be able to log them and set all cookie values without going through login or email verification url.

If somebody describes in this thread how to do it I'll paypal them $5 as soon as I test it.
Thanks in advance.
Brad

[Mistah Roth]

I dont even use the email verification thing, so as soon as members register, they have a half completed cookie until they log out.

[bradsears]

My bounty is now up to $10

Brad

[Mistah Roth]

I'll pay an additional $10

Okay I got impatient and played around, after a while I narrowed it down. In includes/init.php the following sets the session info in the cookie:

PHP Code:

$vbulletin->session->do_lastvisit_update($vbulletin->GPC[COOKIE_PREFIX . 'lastvisit'], $vbulletin->GPC[COOKIE_PREFIX . 'lastactivity']); 


So basically this is all registering will do, login will add the additional username and password. So in init.php right under that line of code i just added

PHP Code:

vbsetcookie('userid', $vbulletin->userinfo['userid']);
vbsetcookie('password', md5($vbulletin->userinfo['password'] . COOKIE_SALT)); 


Seems a bit sloppy, but it works fine, so ill stick with it until someone else figures out a better way.

[bradsears]

I'll test this soon. PM me your paypal email because my name is not Mud.

[Mistah Roth]

Dont worry about payment, I needed this as well, and its a fairly simply fix, just couldnt find where the registration cookie was set until now.