Intergrate VB security to non-vB page

This is a simple Hack which will utilize VB security and will automatically foward back to the referrer url after login or register. Enjoy!

We have been using this hack for almost 8 months now on our online exam
http://www.certifyexpress.com/exam/microsoft/mcse/

[certify]

What is the code in

/home/kinedac/public_html/forums/global.php on line 78

[Sparkz]

Don't have time to test this now, but I think he could do 1 of 2 things.

1. Enter an absolute path for the admin/config.php in the global.php file, ie /home/kinedac/www/forums/admin/config.php or something to that extent.

2. Change directory before including the file. Something like this:

PHP Code:

$curdir = getcwd ();
chdir ("/home/kinedac/www/forums");
include_once ("global.php");
chdir ($curdir); 


I think the last one, if working, would be the cleanest way, since it does not involve editing a vbulletin file.

Again, I have not tested this...

-Sparkz

[kineda]

Thanks Sparkz! It works fine now!

[Sparkz]

My pleasure

[CloakSim]

Any clue on how to set this to a certain user group?

[TheCaver]

Why does it return to the Users CP rather than the referring page?

JC

[x69]

I'm having some problems getting this working..
heres my test.php file

PHP Code:

<?php
echo "before";
//Begin VB Security Intergration Hack
include_once("/www/vhosts/vcdquality.com/html/forum/global.php");

        if ($bbuserinfo[userid]==0)
        {
            
            $thispage=urlencode("$PHP_SELF");
                header("Location:[url]http://www.vcdquality.com/forum/usercp.php?urloverride=1&prevpage=[/url]".$thispage);
                
        }
//End VB Security Intergration Hack
echo "after";
?>
some code here

I get no errors or anything.. all my script outputs is 'before'
what am i doing wrong? Thanks in advance

http://www.vcdquality.com/test.php

[ThoughtDiver]

When I execute my nonvb page with the code in it, whether I'm logged in or not, it just goes to the page and it's a blank white screen.

#!/usr/local/bin/php
<?php
//Begin VB Security Intergration Hack
include_once("/full/home/path/html/forums/global.php");

if ($bbuserinfo[userid]==0)
{

$thispage=urlencode("$PHP_SELF");

header("Location:http://www.site.com/forums/usercp.ph...de=1&prevpage=".$thispage);

}
//End VB Security Intergration Hack
?>
[HTML PAGE HERE]

Any ideas?
Thanks,
Scott

[certify]

Originally posted by TheCaver
Why does it return to the Users CP rather than the referring page?

JC

You need to add the below code in global.php

===Find this====
$ipaddress=$REMOTE_ADDR;
$scriptpath=$REQUEST_URI;

===And add this after the line above===
if(!$urloverride) { $scriptpath=$REQUEST_URI; }
else { $scriptpath=urldecode($prevpage); }

[certify]

x69,

Change to this and test it again.

include_once($DOCUMENT_ROOT . "/forum/global.php");
echo "before";