Limited Access

[947239673bf3]

Vbulletin ver 2.0.1
Web Server IIS5
PHP Ver 4.0.3

Our problem is that we want all users to only be able to get to our Vbulletin forums through one link which is on our web site. We are able to redirect the links to force the user to go through our main site, but our problem is that once they log onto our conference a cookie is created and they are able then to paste the link directly and get to our Vbulletin conference avoiding our main site. We want the cookie to be saved so they do not have to log on with a user name and password each time, but want to completely avoid them getting to the conference with a direct link.

Our setup is as follows:
Our main site has the customer log into our web sites with a password and username (unrelated to Vbulletin), then once we verify they are a valid user they have three choices and one of those choices is our Vbulletin Support Conference, then it takes them to the index.php we developed for them to log onto to our conference (if first time logging on they key in their Vbulletin Conference User name and password, if they have logged in already and have a cookie then it takes them directly to the conference. That works great but the only item we are running into is that once the cookie is saved they can key in the address and get to the conference avoiding our main log in page on our site.

Any info on how we can accomplish what we are looking for would be great.

[Sebastian]

you may want to upgrade your board.. that is a really old outdated version, full of security holes too.

You can use $_GET['HTTP_REFERRER'] or $HTTP_REFERRER using an if(); function to determine if the user came from your site to begin with.