Deluxe vB User login and access control on non vB pages

Hack Description

This is the deluxe version of the user authentication and access control system I use on the non vB pages on my website.
For the simple no frills version look here.

This uses the vB 3.5 login system to log you in and out. It allows you to move between your forums and other pages on your site while remaining logged in.

It allows you to do things such as restrict pages by usergroup, display different content depending on a user being logged in or not.
For example, you can have banner Adds displying to non members only, and/or let members access to specific content.

It also displays the logged in users Avatar, number of unread PM's, New posts since last visit, total posts and total threads.
It also allows you to specify a maximum Avatar size, and resize any avatars larger than that, while keeping their height/width ratios in proportion!
Its very handy if you allow large avatars, but want a small format display on your non forum pages.

If the user is not logged in, a login box is displayed, along with total posts and total threads in the forums.

I will try and offer support, but work and family commitments mean I dont have much free time.

This code is a mix of my own, and pieces I have used from other hacks that are floating around.

This is a work in progress and currently a beta version. It was a little rushed as a few people were pushing for it Its missing a couple of planned things like newest member etc, but they will be added in a later version.

This script has been confirmed as working on

• vB 3.5.x - All Versions
• vB 3.6.x - All Versions

Known Bugs
Will not display Avatars correctly if they are kept in the file system (database avatars are fine)

Changelog

Version 2.20 (24th April 2007)

• Fixed - // in paths bug
• Fixed - Javascript warning in some browsers
• Fixed - Tidied up some code
• Fixed - Avatar display code bug

Version 2.10 (4th June 2006)

• Fixed - "MySQL Error : Invalid SQL " when using Database thread/forum marking.
• Fixed - Javascrip error in some versions of IE.

Version 2.00 (16th April 2006)

• Fixed - "MySQL Error : Unknown column 'newposts' in 'field list' "
• Fixed - Number of PM's not displaying in all installs.
• Added - Displays date and time of last login.
• Added - Total number of saved PM's.

To upgrade just overwrite the existing login_inc.php file with the new one.
You will need to re-edit the path on line 3 and also redo any formatting changes you may have done for the last version.

Version 1.0 (15th Feb 2006)

• Initial Release

Click on Install
If you have this script installed then please click on the install link because;

• You will get notified if any security issues are reported.
• You will get notified when there are any upgrades to this script
• It gives me a warm fuzzy feeling and motivates me to develop more

Donations
First of all, to be clear. This script is 100% free.

However if you feel an urge to donate I'm not going to say no.
Donations can be made at http://www.billspaintball.com/vb3/bd_donate.php

[Billspaintball]

Originally Posted by Zia

helo..if the target page placed in different server?
inthat case will it work?
or how could we?

Maybe....
Cross site logins are a known issue caused by vB's security features.
If you try the suggestions in the 2nd post in this thread you may get that working but no promises.

[Billspaintball]

Originally Posted by Dave Rosteck

Am I stupid or is it impossible to put the content of my choosing inside the "Your logged in so we can display this" field for the logged in users? It won't accept PHP includes (which I would prefer) or anything beyond normal HTML tags such as <center>, <br> or <p>. In result, I continue to receive parse errors. What am I doing wrong?

You can put whatever php code you like in both the display to logged in or not logged in users.

Taking a guess here but your trying to place the php code inside this statement?

PHP Code:

echo "Your logged in so we can display this"; 


That wont work and will cause parse errors as you have found out.
You put the PHP code between the { and } not inside the echo statement.
You can also include other files if you like.

for example

PHP Code:

<?php 
If ($vbulletin->userinfo['userid']!=0) 
    {  
    require_once('mystuff.php');    
    echo "Your logged in so we can display this"; 
    $totthreads = vb_number_format($totthreads);
     $totposts = vb_number_format($totposts);
     // display total threads and total posts - Uses vB phrases, but change if you like
     echo"<br /> $vbphrase[threads]: $totthreads<br />$vbphrase[posts]: $totposts<br /> ";
    } else { 
    echo "Your not logged in so we display this"; 
    } 
?>

Hope that helps.

[Dave Rosteck]

Originally Posted by Billspaintball

Taking a guess here but your trying to place the php code inside this statement?

You'd be correct. Thanks Bill!

[makaveli420]

anybody know how I can disable the script from trying to get the image size?

I get this error after logging in.

Warning: getimagesize() [function.getimagesize]: URL file-access is disabled in the server configuration in /home/.antic/membername/domain.net/login_inc.php on line 34

Warning: getimagesize(http://www.domain.net/forum/image.php?u=1) [function.getimagesize]: failed to open stream: no suitable wrapper could be found in /home/.antic/jmembername/domain.net/login_inc.php on line 34

I would prefer to just display the original size of the persons avatar.

[Billspaintball]

Originally Posted by makaveli420

I would prefer to just display the original size of the persons avatar.

try this.
in login_inc.php find

PHP Code:

$userid=$vbulletin->userinfo['userid'];
$file = $forumpath."/image.php?u=$userid";
list($width, $height, $type) = getimagesize($file);

if ( $width <= $maxw AND $height <= $maxh )// check width and height
   {// if width and height under size display unchanged
       echo "<img src=\"$file.$type\" align=\"center\" border=\"0\">";
   }
   else 
   {  
    if ($width > $maxw)//check if width is too wide
        { // if it is, resize
        $ratio = $width / $maxw; //work out resize ratio
        $newwidth = $maxw; // new width
        $newheight = ($height / $ratio); // new height at this resize
        }
        else
        {
        $newheight = $height; // if width is ok, set this cos we need it later
        $newwidth = $width; // if width was ok, set this cos we ned it later
        }
    If ($newheight <= $maxh )        
        {
        // if current height is ok, were done.
        } 
        
        else // either origional or resized height is too big
            if( $newheight >= $maxh )
            { // if resized height is still too big we resize it
            $ratio2 = $newheight / $maxh; //work out resize ratio
            $newheight = $maxh; // give $newheight a new value
            $newwidth = ($newwidth / $ratio2); // new width at this resize
            } // the value of $newwidth has just been changed
            else
            {// if were here then origional height is too big so we resize it
            $ratio2 = $newheight / $maxh; //work out resize ratio
            $newheight = $maxh; // give $newheight a new value
            $newwidth = ($newwidth / $ratio2); // new width at this resize
            }

        // now we can finally display resized pic
        echo "<img src=\"$file.$type\" border=\"0\" width = \"$newwidth\" height = \"$newheight\" align=\"center\">"; // display resized pic
   }
// +++++++++++++++++++++++  
// end avatar display code
// +++++++++++++++++++++++ 


and replace it with

PHP Code:

$userid=$vbulletin->userinfo['userid'];
$file = $forumpath."/image.php?u=$userid";

echo "<img src=\"$file\" border=\"0\" align=\"center\">"; // display resized pic

// +++++++++++++++++++++++  
// end avatar display code
// +++++++++++++++++++++++ 


I havent tested it, so let me know it it does not work.

[ArchieMB]

it's me again, still having the problem with creating a joomla module with this hack

I still didn't get it

[RobAC]

I like the user authentication system that PhotoPost and ReviewPost utilize from Techimo.

I don't care about showing avatars and have no desire to do so. I just want the same functionality as PhotoPost has.

Does this hack do the same thing?

[Billspaintball]

Originally Posted by ArchieMB

it's me again, still having the problem with creating a joomla module with this hack

I still didn't get it

I m not a joomla expert but I cant see how it would work as a module.
I think you would have to actually hack the joomla code to intergrate this with that.

[Billspaintball]

Originally Posted by RobAC

Does this hack do the same thing?

Sorry, Im not familiar whith how they work.

[erinys]

Hey bill, im in the process of switching servers, and ran into a problem with this hack you might have seen it before, i im posting a screenshot, maybe you know how to fix this?

As far as i know i made no mestakes with paths or anything

As you can see, this is how it shows when logged in (cookie settings are on / and .domain.com) , and notice the "Submit Qeury" in the button... instead of the normal "inloggen" wich it should be

thanks in advance