Major Additions - Yet Another Awards System

*** CREATE A BACKUP OF YOUR FORUM AND DATABASE BEFORE INSTALLING ***

DESCRIPTION:
This is a Medals/Awards system. Admin can give members awards, and award icons will be displayed in member's profile, posts, as well as in a award list.

FEATURES:
In AdminCP
- Can Create/Edit/Delete/Reorder categories/sub-categories in ACP (with category name and description)
- Can Create/Edit/Delete awards in ACP (with Award Name, Description, Icon URL, Image URL)
- Can Move one (or all) award(s) from one category to another
- Can set some awards un-classified (not displayed for public)
- Can re-order awards in awards showcase
- Issue awards to members, based on username or userid, with Issue Reason
- Remove awards from members
+ Writes granting/removing awards to the log

In ModCP
- Issue awards to members, based on username or userid, with Issue Reason
- Remove awards from members
+ Writes granting/removing award to the log

Front page
- Display awards list in with: Award Name, Description, Icon, Image, and Members who get each award.
- Display awards showcase in profile, with Award information, Issue time and reason
- Display award icons in postbit (showthread, showpost, announcement, private)

New Features/Additions since 3.8
- Points System
- Separate Award Request/Recommendation Forms
- CSS Customizable

Current Release Version 4.0.9

• Added - Handling of user merges
• Added - Handling of user deletes
• Added - Manage awards on per user basis
• Added - Extra info to the logs for mass removal and editing of issued awards
• Added - Ability to collapse categories on awards.php
• Added - Checksum file for checking for suspect file versions
• Added - Various missing phrases
• Fixed - Memberlist not showing awards when option is active
• Fixed - Navtab not being selected (vb version < 4.2)
• Fixed - Category title not being displayed on awards.php
• Fixed - Logging not working in modcp
• Fixed - A few other minor bugs

[squidsk]

What's the vulnerability? Those of us using this mod need to assess the seriousness of the vulnerability. If you could PM the details it would be appreciated as you may or may not have noticed but I've been fixing bugs where I can.

[Dave234]

Originally Posted by squidsk

Unfortunately not, there's an error in the uninstallation code, actually an omission, that prevents the plugin from uninstalling correctly.

First uninstall YAAS from the product manager.

Then to do what I posted on the previous page, in admincp go to Maintenance->Execute SQL Query

When prompted run the following query:

show tables

This will give you the list of all tables in your db, look for the ones that have awards in their name, there should be between one and three of them, most likely three. In my db the tables are called:

award
award_cat
award_requests

The names might be different in your db, especially if your tables have a prefix. Take note of the names, and then run drop table queries, one per table, to remove the tables.

So if I was removing the three tables from my db I'd run the following three queries:

drop table award

drop table award_cat

drop table award_requests

Then I could reinstall YAAS from scratch.

I have removed the above three tables from my database, but I also see another couple:

award_automation
award_user

Do these need to be removed as well?

[squidsk]

Originally Posted by Dave234

I have removed the above three tables from my database, but I also see another couple:

award_automation
award_user

Do these need to be removed as well?

Those are from the awards automation plugin which is an additional, separate, plugin that works on top of YaAS, I'd uninstall that plugin and remove those tables as well, then you'll have uninstalled all parts of YaAS.

If you look in my sig you'll see a link to a new, unofficial, version of YaAS that I released that fixes many of the bugs in the current official release. I'd recommend using that if you're going to try and re-install. It fixes the uninstall issues among other things. A complete list of fixes/changes is at the post in the link.

[apapterx]

I'm having a slight problem. Everything is working fine apart from member cannot recommend a member.

Any ideas on what to do ?

I get the following:

you do not have permission to access this page. This could be due to one of several reasons:

Your user account may not have sufficient privileges to access this page. Are you trying to edit someone else's post, access administrative features or some other privileged system?
If you are trying to post, the administrator may have disabled your account, or it may be awaiting activation.

[squidsk]

Make sure the member is part of a group which has the recommend ability turned on. Its a usergroup setting.

[wat3v3r]

According to a hacking forum v4.0.2 has an exploit and can lead to an SQL injection to your site ?

Will send squidsk a pm with the details... hope he can fix this asap.

[hjmaier]

Great! Thank you very much for the fix!

[EasyEazy]

Great update.

Thanks again

[EasyEazy]

Hi squidsk

After updating there seems to be a problem with the templates in the member info. See the pictures below. The first one was an older version of this mod and the one below is the new version. See how the new version the awards are mashed together with no spacing. Any chance you could help?





Thanks

[Dave234]

I see that the mod has been updated. Is it correct that we should now download YaAS-4.0.4.zip and YaAS-Automation-R2.zip?

Can you provide step by step instructions on how to install this mod?

Thanks!