Password Protected Forums (vB3 Style)

-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-
Password Protected Forums (vB3)
By Shaolyen
email: John@eovie.com
msn: John@eovie.com

TESTED ON A FRESH vB 2.3.0
-\/-\/-\/-\/-\/-\/-\/-\/-\/-\/-\/-

Introduction
-----------------------------------------------------------
This hack is fairly simple in what it does.

If a user tries to access a password protected forum, they will be
prompted for the password. Once entered correctly they'll be able
to browse the forum as normal. It's as simple as that!

There are a few extras in this. When a user enters a password and
it's verified as being correct, a cookie is sent to their PC
containing the password. This will ensure that they don't need to
log in every time they access the protected area, until the cookie
expires.

The cookie timeout time for each protected forum can be set in the
AdminCP. (You can choose anything from 1 minute to 1 year.)

Password protected forums are denoted by the text
"[Password Protected]" tagged on the end of the forum description.
If you don't have a forum description for your password protected
area, "[Password Protected]" will take its place.

Please bear in mind:
? Threads will appear in searches, but the title, author, etc. are
all set to "Restricted". A password is needed to access these threads.
? The password in the cookie IS NOT ENCRYPTED. This is for a
reason, so the password can be viewable in the AdminCP. If
anyone would prefer MD5 encryption in their cookies, let me know.
? In the very near future I will be adding on options to enable
MD5 encryption.
? When you specify "Regular Forum Security" in the AdminCP and
a password has been entered, that password will not be recorded.

Security level, password, and timeout times can be specified when
creating or editing a forum.
(AdminCP > Forums & Moderators > Add | Modify)


Warning
-----------------------------------------------------------
BACKUP YOUR DATABASE AND FORUM FILES BEFORE YOU EVEN THINK ABOUT APPLYING THIS HACK!
-----------------------------------------------------------

Shameless Plug
-----------------------------------------------------------
This hack was written for the fine people at xAviaHosting -
www.xaviahosting.com. Pay them a visit (Or I'm a dead man!)
-----------------------------------------------------------

Shameful Plea
-----------------------------------------------------------
I'm poor as always, I'd be seriously grateful for any donations..!
If you have a few spare pennies in that Paypal account, my address
is "John@eovie.com" - share the wealth!
-----------------------------------------------------------

Screenshots:
-----------------------------------------------------------
Password protected indicator
Password prompt
AdminCP Settings
Search results 1
Search results 2
-----------------------------------------------------------

Update 1.0 > 1.1
-----------------------------------------------------------
? Search blocking enabled.
Screenshots:
Search results 1
Search results 2

Available here
-----------------------------------------------------------

[grov]

Is there anything one could do to modify this hack so that it isn't possible to bypass the password ?

Regards.

[poetic]

ok, i added

PHP Code:

  maketableheader("Forum Security");
  echo "<tr class='".getrowbg()."' valign='top'>\n<td><p>Choose Forum Security</p></td>\n<td><p><select name=\"security\">\n";
      echo "<option value=\"1\" SELECTED>Regular Forum Security</option>\n";
      echo "<option value=\"2\">Password Protected Security</option>\n";
  echo "</select>\n</p></td>\n</tr>\n";
  makeinputcode("Forum Password<br><font size=1>If password protection is enabled, you must 
  choose a password <br>needed to access the forum.</font>","forumpassword");
  
  echo "<tr class='".getrowbg()."' valign='top'>\n<td><p>Password Timeout<br><font size=1>The time until the password times out.
  <br>After the this occurs, the user will have to enter the password again to gain access.</font></p></td>\n<td><p><select name=\"passtimeout\">\n";
      echo "<option value=\"60\" SELECTED>60 Seconds</option>\n";
      echo "<option value=\"600\">10 Minutes</option>\n";
      echo "<option value=\"1800\">30 Minutes</option>\n";
      echo "<option value=\"3600\">1 Hour</option>\n";
      echo "<option value=\"36000\">10 Hours</option>\n";
      echo "<option value=\"86400\">1 Day</option>\n";
      echo "<option value=\"604800\">1 Week</option>\n";
      echo "<option value=\"2419200\">1 Month</option>\n";
      echo "<option value=\"29030400\">1 Year</option>\n";
  echo "</select>\n</p></td>\n</tr>\n"; 


after

PHP Code:

  makechoosercode("Custom style set for this forum","styleset","style",$forum[styleid]);
  makeyesnocode("Override users custom styles<BR>(will force this forum's specified colors)","styleoverride",$forum[styleoverride]); 


in admin/forum.php in attempts to be able to assign a password to existing forums instead of just having that option of adding a password wen creating forums. i then assign the attributes and the password and the cookie timout, then click save changes. but it dosen't actually save, the password is not applied and i go back into edit and the same forum and the password area is back to its original state can someone please help

[ronb]

I installed this hack and i do not see anything in the admin cp. Any ideas as to what i did wrong?

[poetic]

^^the option to set a password is only avalible when you make a new forum, so when u make a new forum right where u set the name and permissions at the very bottom if u followed the instrucstions right it should be there

[zsmom]

I just installed it on 2.3.2 and it works fine. Any forums that I really really need to keep people out of I use access masks for or make the forum hidden. Like someone else said, it works great to just keep out the casual lurkers.

* clicks install

[ronb]

i installed this hack and it worked fine until we tried to add another forum. We're getting an sql error. Here's what we're getting.

Database error in vBulletin Control Panel 2.3.0:

Invalid SQL: INSERT INTO forum
(forumid,styleid,title,description,active,displayo
rder,parentid,
parentlist,allowposting,cancontainthreads,sponsorn
ame,sponsorimg,
sponsorurl,daysprune,newpostemail,newthreademail,
moderatenew,allowhtml,allowbbcode,allowimages,allo
wsmilies,allowicons,
styleoverride,allowratings,countposts,moderateatta
ch,security,forumpass,pastimeout)
VALUES
(NULL,'1','Temporary MOB','','1','4','41',
'','0','1','','',
'','30','','',
'0','0','1','0','
s','1',
'0','1','1','0','1','','60')
mysql error: Unknown column 'pastimeout' in 'field list'

mysql error number: 1054

Any ideas as to how i can fix this so we can add more forums?

[MaDCaT75]

Uh did anyone fix the password exploit yet where you can input any password and you can still get in!?

[Oblivion Knight]

Seems to be working with no problems on 2.3.3 using the file posted in #76 and the fix posted in #90.. I'm not able to bypass the forum password using the method discussed in this thread, and the forum password updates fine when entering a new one.

Could anyone point me in the right direction to make this mod work with this.? Currently the forum password protection can be bypassed by clicking on the title of the last thread shown on the forum summary.

[Roody]

I would like to use this hack to keep an Asst. Admin from accessing a certain forum on a site I admin. Unfortunately since he has Admin CP access he could read the password. You mentioned in your first post about setting it up so the password have asterisks or another symbol to replace the password so it couldnt be read in the AdminCP.

How do I go about making this happen?

[skullycapone]

ok can someone help me a little i am kinda new to this and was wondering how to run the queries