Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions

Reply
 
Thread Tools Display Modes
  #1  
Old 08-16-2007, 07:36 PM
Octane1 Octane1 is offline
 
Join Date: May 2007
Posts: 6
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Regular Members accessing restricted areas

Hello All,

For the last little while I have been noticed that sometimes regular members try to access the staff section on our website. On the Who's Online area they do get a Stop Sign message. However, this begs the question of how do they know the particular url address for a thread which resides in the staff section. I do not know if this a VB flaw or not.
I am running VB 3.6. If anyone could shed some light on this issue I would greatly appreciate it.

Thank you kindly for your time.
Reply With Quote
  #2  
Old 08-16-2007, 07:38 PM
Paul M's Avatar
Paul M Paul M is offline
 
Join Date: Sep 2004
Location: Nottingham, UK
Posts: 23,748
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Either you have link somewhere, or they are simply guessing at threadids.
Reply With Quote
  #3  
Old 08-16-2007, 07:42 PM
nexialys
Guest
 
Posts: n/a
Default

some settings make the forums not displayed by default on forumdisplay but make them appear on forumjump... take care to set the proper permissions to these forums, not only the display of them.
Reply With Quote
  #4  
Old 08-16-2007, 07:43 PM
Octane1 Octane1 is offline
 
Join Date: May 2007
Posts: 6
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Paul M View Post
Either you have link somewhere, or they are simply guessing at threadids.
Thank you Paul for your reply. We dont have any links to any of the Staff threads outside the Staff section. If the person is guessing they are doing a decent job of it.

Quote:
Originally Posted by nexialys View Post
some settings make the forums not displayed by default on forumdisplay but make them appear on forumjump... take care to set the proper permissions to these forums, not only the display of them.
I will definitely look into that. Thank you for the advice.
Reply With Quote
  #5  
Old 08-16-2007, 08:04 PM
EnIgMa1234 EnIgMa1234 is offline
 
Join Date: Mar 2006
Location: .:: Ireland ::.
Posts: 1,306
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Also CYB - Advanced Forum Statistics Shows Recent Threads From All Forums, Hidden Included.
Reply With Quote
  #6  
Old 08-16-2007, 08:15 PM
Octane1 Octane1 is offline
 
Join Date: May 2007
Posts: 6
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by EnIgMa1234 View Post
Also CYB - Advanced Forum Statistics Shows Recent Threads From All Forums, Hidden Included.
Is that an installed hack that one has to have on VB? Or is it something any regular user can employ?
Reply With Quote
  #7  
Old 08-16-2007, 08:16 PM
EnIgMa1234 EnIgMa1234 is offline
 
Join Date: Mar 2006
Location: .:: Ireland ::.
Posts: 1,306
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Its an addon you have the options to install, not required
Reply With Quote
  #8  
Old 08-17-2007, 02:58 AM
0tolerance 0tolerance is offline
 
Join Date: Jun 2007
Posts: 88
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Are you sure its not google bots, because they try to index every little bit of information they can get, even PM's that you have sent, they pick up that you have sent it and try read the information.
Reply With Quote
  #9  
Old 08-18-2007, 05:06 PM
Octane1 Octane1 is offline
 
Join Date: May 2007
Posts: 6
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by EnIgMa1234 View Post
Its an addon you have the options to install, not required
Thank you for the info.

Quote:
Originally Posted by 0tolerance View Post
Are you sure its not google bots, because they try to index every little bit of information they can get, even PM's that you have sent, they pick up that you have sent it and try read the information.
Yup Im pretty sure its not a bot. It was an actual member who was new. Which was pretty odd. I know there is a way to insert a .txt to prevent bots from crawling areas that dont need to be indexed.

I wonder though if its possible to to password protect just this restricted section using .htaccess
Reply With Quote
  #10  
Old 08-18-2007, 10:11 PM
Antivirus's Avatar
Antivirus Antivirus is offline
 
Join Date: Sep 2004
Location: Black Lagoon
Posts: 1,090
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Its certainly possible with htaccess. Also what I suggest you do is change the name of your admincp and modcp directories to something other than default like admincpx

Jkust make sure you change the appropriate setting in your config.php file and in admin cp settings (if req)
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 09:35 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04428 seconds
  • Memory Usage 2,239KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (5)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (9)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete