'Clean Sessionhash' (1.3 released, all bug's fixed)

Hack: Clean sessionhash 1.3

With this hack installed bits in the url (s=) used for the sessionhash in all vBulletin powered links will be striped when the sessionhash is not in use.

For example, when the sessionhash is off a link on your forum will look like:

index.php?s=

Or if a action is used:

index.php?s=&action=somthing

With this hack installed the s= and un-needed & will be striped out. And will look like this:

index.php?

and:

index.php?action=somthing

How to install:

1: Apply the change to sessions.php listed in the attachment.

2: Edit all templates containing the $session[sessionhash] variable, I am not including a steap by steap template instructions because they vary so much between differnt styles. You will have to do this yourself.

You have to look for two things, links in this format "?s=$session[sessionhash]" should be changed to just "?$session[sessionhashnoamp]". Also links in this format "?s=$session[sessionhash]&" need to be changed to "?$session[sessionhashamp]"

The old $session[sessionhash] var still works as it normally would, so your board will not break if you miss some templates.

Warning!!: Do not edit links that use $session[dbsessionhash]!

This hack is not for the faint of heart to install, it will take some time.

1.3 Released ([high]Stable[/high]):

Fixed error in one line of code, hack will work without problems and has been deemed stable, tested with 2.3.0, and 2.2.8.

1.2 Released:

Missed line in block of code, untested. [high]If running upgrade to 1.3[/b]

[Brad]

You can try to use vBulletin's built in template search/replace system but it has always failed to get all the templates updated for me. Also doing it with replacements would be useless because you would still have to update all the templates with links in them for it to work.

[Xelation]

worked thanks

[Mickie D]

yeah i ment the search replace thingy lol

also your step 2 m8

do i change all $session[sessionhash] that i find ???

or just the ones in links ??? just under your step 2

ie

?s=$session[sessionhash]

and

?s=$session[sessionhash]&

ok i have this in one of my templates .. if you tell me what to do with that then i am sure i can work it out

<input type="hidden" name="s" value="$session[sessionhash]">

i dunno what to do with that ???

sorry i can be a right donut sometimes

[NTLDR]

IMO the best way to do it would be with a preg_replace in the dovars() function that would remove all instatnces of:

• ?s=
• &s=
• amp;s=

when the condition used in the hack is true, not fool proof, but easier then editing all the templates.

[Parker Clack]

AL:

I have noticed on my board that the sessionhash numbers are removed anyway without having to remove anything from the templates.

Great hack.

Parker

[Limitter]

worked great thanks

L.

[David Bott]

Parker...

When I use this wihtout mods to the templates and I have my profile set to use cookies (Thus no session #'s), it STILL uses session numbers. Without the hack installed it does not use session numbers. Does the same on your site.

So, not sure why, but it does not seem right in this case.

David

[Parker Clack]

I didn't have the problem with the session numbers showing up when I used the automatically log in turned on but had the browse this board with cookies turned off. So with that option turned on the sessionhash number aren't getting removed.

Parker

[ImportPassion]

definetly doesn't work for me.

with this hack, it gives a hash and the s=, w/o it, just the s=.

D

[Brad]

7th:

Did you do the required modification to your templates has noted in post #1 of this thread?