NOTE: Confirmed bug affecting all attachments. See post #20.
By request I have updated this to work on the latest vBulletin, VB 4.1.12. It should work on all 4.x versions.
There are NO new features, it is a simple update so it works with 4.x
I will not be providing official support for this mod- truth be told I'm not sure how it works, only that it does in my quick tests.
This is the original description:
Quote:
This hack allow protect thread by password same way as forums.
Administrator and moderators can change password, can appoint thread masters.
Thread masters can only change password.
All thread content are protected by password : attachments,printable version, archive,
search results. Instant subscription letters will not contain message.
You're welcome. I made an edit to the post above with something you can try if you feel like manually editing a file- otherwise wait until I get a chance and I will try it myself.
You're welcome. I made an edit to the post above with something you can try if you feel like manually editing a file- otherwise wait until I get a chance and I will try it myself.
That fixed it! Is it safe to have the CSRF Protection off though?
For a mod like this I don't see a problem. When I get my system back I'll go through the code thoroughly and see why it isn't working to begin with. It's not like anyone can post to the forum via this script- there would be no benefit sending a thread password from an outside domain- nothing to be gained.
Great module! One question: is there a way to add the password and Thread Master fields on thread creation, instead of having to post the thread, then go back and edit it?
Thanks, I'll give it a try in a bit. Unfortunately, I've run into a more significant problem. With the module enabled, all attachments on my entire forum break. They appear to upload properly, but they do not display at all. No thumbnail shows, all that is visible is the mouseover text with a link. Clicking the link opens the window where the attachment image is usually shown, but it never loads and eventually returns an error. I have tested the module with and without the template edit, and the error is there even without the template edit, so it appears to be something within the module files themselves. Do you have any idea which section could be causing the conflict?
Immediate work-around is to disable the "thread password" plugin on the attachment_display hook.
Disabling this will allow users who do not have the password to the thread to see attachments in that thread if someone gave them the URL of the attachment- this may or may not be a problem for you.
I don't see an immediate long-term solution, I will try to work on it when I get a chance.