Block access to vB PHP files by user ID

This mod allows you to block access to the following vB PHP files by specifying what user IDs to block. This works on a per file basis, so you can have different userIDs for different files. You can also block userID 0 to prevent guests or bots from accessing any of the files. No screenshot is necessary, as a blocked user will see the 'you do not have permission to access this page' notice instead of the file output. See post6 for how to add extension files. To install, go to the ACP -> Manage Products -> Add/Import Product, and then go to the ACP -> vBulletin Options.

ajax.php          announcement.php  attachment.php     calendar.php
cron.php          editpost.php      external.php       faq.php
forumdisplay.php  image.php         index.php          inlinemod.php
joinrequests.php  login.php         member.php         memberlist.php
misc.php          moderator.php     newattachment.php  newreply.php
newthread.php     online.php        payments.php       poll.php
postings.php      printthread.php   private.php        profile.php
register.php      report.php        reputation.php     search.php
sendmessage.php   showgroups.php    showpost.php       showthread.php
subscription.php  threadrate.php    usercp.php         usernote.php

// in case you block yourself from login, why would you do that, :wink:
// place this in the vB config to completely disable everything
// and then go log in, and then comment this from the vB config

define('DISABLE_HOOKS', true);

[IrPr]

Good!
is it possible to do with Extension Modifications??

[bashy]

I like this idea...Installed

[Snake]

I like this mod!

[evenmonkeys]

That's a rather clever idea.

[calorie]

If the extension has both of these, where global is the forum root global:

define('THIS_SCRIPT', 'uniquename');
require_once('./global.php');

And the extension prints out a text page, go stick this in vB config:

// change 123.123.123.123 to your IP address
if ($_SERVER['REMOTE_ADDR'] == '123.123.123.123')
{
        $config['Misc']['debug'] = true;
}

Then go to vB Options -> Block File Access Settings -> Add Setting:

Varname: bfabu_uniquename_uids
Setting Group: Block File Access Settings
Product: Block File Access
Title: Block 'uniquename' Usage
Description: Enter the user IDs to block from using the uniquename.php file. Separate each user ID with a space. Example: 8 16 24
Option Code: leave it blank
Data Validation Type: Free
Default: leave it blank
Display Order: leave as-is
vBulletin Default: Yes

And then remove this from vB config:

// change 123.123.123.123 to your IP address
if ($_SERVER['REMOTE_ADDR'] == '123.123.123.123')
{
        $config['Misc']['debug'] = true;
}

Note uniquename needs to be unique.

[Bro_Joey_Gowdy]

Nice, been waiting for this, great plugin !!

*installs*

[IrPr]

Originally Posted by calorie

If the extension has both of these, where global is the forum root global:

define('THIS_SCRIPT', 'uniquename');
require_once('./global.php');

And the extension prints out a text page, go stick this in vB config:

// change 123.123.123.123 to your IP address
if ($_SERVER['REMOTE_ADDR'] == '123.123.123.123')
{
        $config['Misc']['debug'] = true;
}

Then go to vB Options -> Block File Access Settings -> Add Setting:

Varname: bfabu_uniquename_uids
Setting Group: Block File Access Settings
Product: Block File Access
Title: Block 'uniquename' Usage
Description: Enter the user IDs to block from using the uniquename.php file. Separate each user ID with a space. Example: 8 16 24
Option Code: leave it blank
Data Validation Type: Free
Default: leave it blank
Display Order: leave as-is
vBulletin Default: Yes

And then remove this from vB config:

// change 123.123.123.123 to your IP address
if ($_SERVER['REMOTE_ADDR'] == '123.123.123.123')
{
        $config['Misc']['debug'] = true;
}

Note uniquename needs to be unique.

Thanks Calorie ! one of my fav. coders

[IrPr]

is it possible to with usergroup instead of userid?

[calorie]

Untested, but for primary usergroups only, find:

			if (in_array($vbulletin->userinfo['userid'], $bfabu_user_ids_array))

And replace with the following:

			if (in_array($vbulletin->userinfo['usergroupid'], $bfabu_user_ids_array))

Or, for both primary and secondary usergroups, replace with the following:

			if (in_array($vbulletin->userinfo['usergroupid'], $bfabu_user_ids_array) OR !empty(array_intersect($bfabu_user_ids_array, explode(",", str_replace(" ", "", $vbulletin->userinfo['membergroupids'])))))