Integration with vBulletin - MediaWiki/vBulletin Single Sign-On

Overview:
This hack provides single sign-on capability for MediaWiki using your vBulletin users. You must ensure your cookie path in Admin CP is set to '/' for this to work. Also, I have not tested this if your wiki and your forums are on different subdomains - but as long as your have your cookie domain set properly it *should* work. This is not a user bridge - it is a complete single sign-on using your vBulletin user repository.

The install process has been extremely simplified in version 2.x of this product. You only have to edit LocalSettings.php, import a product, and change a setting in your Admin Control Panel. It's been completely packaged as a vBulletin product - unlike the previous hacked up version, heh. I didn't originally plan to release this so I designed it so it worked - not so it could be redistributed. I searched high and low for a functional MediaWiki bridge - almost bought NuHIT's product, and then realized it had been abandoned for over a year.

This hack no longer requires an edit to class_core.php.

I'll do my best to support it, but I can make no promises.

This thread is for discussion of this mod on vB 3.7.x. For vB 3.8.x, please use the MediaWiki/vBulletin Single Sign-On 3.8 thread

Demo of plugin in action: MyMMOGames - Multiplayer Gaming and Media Community

Also, if you use memcached - ensure you do not cache sessions. If you do, restart it at least once a week. If you don't, you'll end up with invalid session errors out of MediaWiki.

Requirements:
MediaWiki Version: 1.11.0-1.14.0
vBulletin Version: 3.6.9-3.8.2

Features:
- Provides single sign on capability between vBulletin and Mediawiki. vBulletin user repository is used
- Configurable sysop/bureaucrat groups
- Configurable disallowed user groups
- Configurable "Who's Online" display
- Counts users viewing wiki in vBulletin's "Who's Online"

Installation/Upgrade:
Please read the included "readme.txt" file in the "docs (do not upload)" folder.

Options:
Admin Control Panel->vBulletin Options->MMOG Wiki Options

Change Log:
1.0.0.0 - Sep 18, 2008
- Initial Release

1.0.3.0 - Sep 29, 2008
- Bugfix: Incorrect redirects for login/logout

2.0.0.0 - Sep 30, 2008
- Feature: Streamlined installation procedure
- Feature: Wiki path set in ACP
- Bugfix: Forum paths no longer hardcoded

2.1.0 - Oct 4, 2008
- Feature: ACP option to use MediaWiki Short URLs
- Feature: ACP option to set sysop groups
- Feature: ACP option to set bureaucrat groups
- Feature: ACP option to disallow login to certain groups
- Feature: ACP option to change WOL display text

2.2.0 - May 1, 2005
- Bugfix: Users are not logged out when logging out of the forum
- Bugfix: No longer requires modification to class_core.php
- Feature: Mediawiki 1.13.0+ supported (verified on 1.14.0 also)

If you like it, please click "mark as installed" The more people that use this, the more time I will make to try and support/update it.

Been pulling your hair out looking for this as long as I have? Nominate it for Mod of the Month =]

AuthPlugin was inspired by and modified from this existing MediaWiki Extension:

http://www.mediawiki.org/wiki/Extension:QISSingleSignOn

[GoodOmens]

Ok a new bug popped up recently:

Users can no longer edit ANYTHING. I get the following error:

Your edit has been rejected because your client mangled the punctuation characters in the edit token. The edit has been rejected to prevent corruption of the page text. This sometimes happens when you are using a buggy web-based anonymous proxy service.

If I remove the plugin everything works fine.

No changes have been made by me so I'm really scratching my head on this one.

Only thing I can think of is changes in latest vbulletin.

[NoeJeko]

it sounds like you didn't make the required changes to class_core.php or the changes were overwritten by a vB upgrade. Remember if you upgrade your forum you must reapply the changes to class_core.php.

Posted from my Blackberry, please excuse spelling.

[GoodOmens]

Originally Posted by NoeJeko

it sounds like you didn't make the required changes to class_core.php or the changes were overwritten by a vB upgrade. Remember if you upgrade your forum you must reapply the changes to class_core.php.

Posted from my Blackberry, please excuse spelling.

That is exactly what it was. I forgot a manual edit of the vbulletin files was necessary. Thanks for the quick reply - everything is working perfectly again!

Consider this a user error

[NoeJeko]

Hopefully they'll work something into vBulletin so that I don't have to do this in the future. I posted in the "hook requests" forum on vb.com but it isn't really a hook I'm after... more like an option to disable the input cleaner for certain scripts.

[seoranter]

Originally Posted by shikareez

From MW 1.13+ the "AutoAuthenticate" Hook is renamed to "UserLoadFromSession". So just follow all the instruction and at all, just edit the hook name to "UserLoadFromSession" at near the end of AuthPlugin_vBSSO.php.

Thanks a million for posting this! Can we have this updated / included in the latest version of the plugin, too, please? Perhaps switching between userloadfromsession and autoauthenticate based on mw version at install / runtime?

In the meantime, I'll mark as installed and satisfied

[leitel]

I have it running now. This is an awesome hack. I did notice though that in vB when looking at a user and where there are I get: Current Activity: Unknown Location /index.php/Erythropoietin_(EPO) .
My wiki is on a sub.domain although URLs to domain.com/wiki will resolve to the sub domain.
I have tried various "Wiki Path" in the vB options.
So basically, the Who's On doesn't see the path of the wiki and the link DOES point to the correct wiki page however, it is without the base wiki domain.

[NoeJeko]

Originally Posted by seoranter

Thanks a million for posting this! Can we have this updated / included in the latest version of the plugin, too, please? Perhaps switching between userloadfromsession and autoauthenticate based on mw version at install / runtime?

In the meantime, I'll mark as installed and satisfied

Yeah, it'll be implemented but I need to upgrade my own wiki to 1.13 before I can reasonably support it on that platform. I've been swamped with other projects - that's why I've just dropped by to provide quick support when I can but it will get done by the end of the year.

Originally Posted by leitel

I have it running now. This is an awesome hack. I did notice though that in vB when looking at a user and where there are I get: Current Activity: Unknown Location /index.php/Erythropoietin_(EPO) .
My wiki is on a sub.domain although URLs to domain.com/wiki will resolve to the sub domain.
I have tried various "Wiki Path" in the vB options.
So basically, the Who's On doesn't see the path of the wiki and the link DOES point to the correct wiki page however, it is without the base wiki domain.

That's odd - I may have an idea on how to get around this but as it isn't security-related I'll queue it with the above request. Keep in mind, your users cannot see the "Unknown Location" - just staff (we had a few mods on our board that didn't know that).

Thanks to everyone for your support and using this mod.

[NoeJeko]

Double post ftw.

I just realized what's causing this and /facepalm for not realizing it beforehand.

You can add this line to the .htaccess file in your wiki directory and then the change to class_core.php is not necessary:

php_flag magic_quotes_gpc off

If you don't have a .htaccess file in your wiki directory, just create it. This applies to servers running Apache only. Alternatively, you can disable magic_quotes_gpc in php.ini.

This feature is depreciated as of PHP 6.0.0 anyway, so it makes sense to start coding with the mentality that your input no longer has this shield. I'll update the installation instructions when I make the next major update; it doesn't make sense to advertise an update for this minor change. Future versions will not require the code change.

[BRotondi]

Sorry for asking the same, but I cannot find the solution in the thread: Does this Hack work with vBulletin 3.7.4 and MediaWiki 1.13?

Login via Wiki does not work... (Redirecting to vB, but nothing happens. I restored the original Userlogin.php to be able to login...)

Thanks for a short info.
Bruno

[NoeJeko]

vB 3.7.4 just came out recently; I haven't had time to test this plugin against it.