HTTP Upload Hack

Hi @LL,

UPDATE:

This version is now obsolete. I have just posted the next version for this upload hack. You can find it here.

This version will no longer be supported !!!


many people requested this hack and many people wanted to have it independant of VBulletin. Due to this i created this simple hack which uploads files via HTTP.

Copy both files in the same directory where you want to upload files into it. This works only in the same directory. So you can not choose where to put the files. It just uploads the files.

I have added a little bit security to this because many people will try to use this as soon as they know about it. The config file has the login and the password to log into the script.

In addition to this i have made this session depending. You can not call specific subroutines of this script without having logged in properly. As soon as you close your browser and you try to call subroutines you will be blocked.

I have also implemented a small check for existing files. It will deny the upload if you want to upload a file which already exists. With this you will be on the secure side so no one overwrites any important file with rubbish.

This has nothing to do with VBulletin but many people requested this as part of their administrative work.

I take no responsibility for this hack !!! If someone finds a security hole or a bug and something happens i will not be responsible for any damage !!!

After reading the rules for VBulletin.org this hack could be removed due to not cooperating with VBulletin. So it is up to the staff of VBulletin.org to decide to remove this hack or to follow the demands of their members and leave it. I just want to help some members here and i hope i do not cause any trouble with this hack.

Enjoy it.

Cheers,

[gmarik]

any demos?

[Pseudomizer]

Originally Posted by gmarik

any demos?

I guess no one will give you the link to upload any files to their webserver. Bad request.

But i will attach the screenshots, so you can see how simple this is.

Cheers,

[Oldfart]

I have a question.

Would it be possable to make this hack to be able to download as well as upload from the same directory?

I guess I should explain. What i'm looking for is a non PHP MySql upload/download program for my website. I have pafiledb but I can't upload anything larger than 2mbs because of my hosts php upload settings. I have over 7 gig's worth of web space that I pay for but never use anywheres close to it and I would like to allow my members to be able to use some of this unsed space.

Thanks for your reply.

[Pseudomizer]

Originally Posted by Oldfart

I have a question.

Would it be possable to make this hack to be able to download as well as upload from the same directory?

I guess I should explain. What i'm looking for is a non PHP MySql upload/download program for my website. I have pafiledb but I can't upload anything larger than 2mbs because of my hosts php upload settings. I have over 7 gig's worth of web space that I pay for but never use anywheres close to it and I would like to allow my members to be able to use some of this unsed space.

Thanks for your reply.

Hi Oldfart,

the PHP setting for the upload is per default 2MB. You have to change this setting to upload more then 2MB. If you want to upload into a MySQL database then you have to edit your .cnf file to allow bigger uploads into the DB.

This is an HTTP upload with PHP files and this will always rely on the php.ini setting. If you are not able to edit the 2MB limit, then this hack will not help you at all. Sorry, but no way to get around this.

Cheers,

[d3nnis]

hi how is it possible to modify to integrate into vbulletin(requires registration before they can use)? I would like to have some image hosting for my community members.

[Pseudomizer]

Originally Posted by d3nnis

hi how is it possible to modify to integrate into vbulletin(requires registration before they can use)? I would like to have some image hosting for my community members.

Take this at the beginning:

PHP Code:

if($bbuserinfo[userid]!=0)
{ 


and at the end put this:

PHP Code:

}
else
{
    echo "You are not logged in";
} 


But please keep in mind that this upload hack allows the upload of any file. It is not limited to just graphics. So they could upload any php file and run it.

This is DANGEROUS !!!!!!!!!

Cheers,

[d3nnis]

Originally Posted by Pseudomizer

Take this at the beginning:

PHP Code:

if($bbuserinfo[userid]!=0)
{ 


and at the end put this:

PHP Code:

}
else
{
    echo "You are not logged in";
} 


But please keep in mind that this upload hack allows the upload of any file. It is not limited to just graphics. So they could upload any php file and run it.

This is DANGEROUS !!!!!!!!!

Cheers,

so how do i restrict to certain file types only?

[Pseudomizer]

Originally Posted by d3nnis

so how do i restrict to certain file types only?

This needs some recoding work. Will be added in the next version.

Cheers,

[subu1]

klasse super und eingebaut, es sei noch zu erw?hnen dem Ordner die 777 zu geben

[Pseudomizer]

Hi @LL,

this version is now obsolete. I have just posted the next version for this upload hack. You can find it here.

This version will no longer be supported !!!

Cheers,