Deluxe vB User login and access control on non vB pages

Hack Description

This is the deluxe version of the user authentication and access control system I use on the non vB pages on my website.
For the simple no frills version look here.

This uses the vB 3.5 login system to log you in and out. It allows you to move between your forums and other pages on your site while remaining logged in.

It allows you to do things such as restrict pages by usergroup, display different content depending on a user being logged in or not.
For example, you can have banner Adds displying to non members only, and/or let members access to specific content.

It also displays the logged in users Avatar, number of unread PM's, New posts since last visit, total posts and total threads.
It also allows you to specify a maximum Avatar size, and resize any avatars larger than that, while keeping their height/width ratios in proportion!
Its very handy if you allow large avatars, but want a small format display on your non forum pages.

If the user is not logged in, a login box is displayed, along with total posts and total threads in the forums.

I will try and offer support, but work and family commitments mean I dont have much free time.

This code is a mix of my own, and pieces I have used from other hacks that are floating around.

This is a work in progress and currently a beta version. It was a little rushed as a few people were pushing for it Its missing a couple of planned things like newest member etc, but they will be added in a later version.

This script has been confirmed as working on

• vB 3.5.x - All Versions
• vB 3.6.x - All Versions

Known Bugs
Will not display Avatars correctly if they are kept in the file system (database avatars are fine)

Changelog

Version 2.20 (24th April 2007)

• Fixed - // in paths bug
• Fixed - Javascript warning in some browsers
• Fixed - Tidied up some code
• Fixed - Avatar display code bug

Version 2.10 (4th June 2006)

• Fixed - "MySQL Error : Invalid SQL " when using Database thread/forum marking.
• Fixed - Javascrip error in some versions of IE.

Version 2.00 (16th April 2006)

• Fixed - "MySQL Error : Unknown column 'newposts' in 'field list' "
• Fixed - Number of PM's not displaying in all installs.
• Added - Displays date and time of last login.
• Added - Total number of saved PM's.

To upgrade just overwrite the existing login_inc.php file with the new one.
You will need to re-edit the path on line 3 and also redo any formatting changes you may have done for the last version.

Version 1.0 (15th Feb 2006)

• Initial Release

Click on Install
If you have this script installed then please click on the install link because;

• You will get notified if any security issues are reported.
• You will get notified when there are any upgrades to this script
• It gives me a warm fuzzy feeling and motivates me to develop more

Donations
First of all, to be clear. This script is 100% free.

However if you feel an urge to donate I'm not going to say no.
Donations can be made at http://www.billspaintball.com/vb3/bd_donate.php

[erinys]

I'm pretty sure thats basic VB since i dont have a lot of hacks and non of them is password related

I'll see if i can find the setting for you.

Btw im getting reports of more members now getting my page down due to the hack / expired passwords, so its pretty serious.

thanks for looking into it.

[Dzi13]

Hello!

I have some problems with charset. My site use windows-1250 and forum use ISO-8859-1. After i install Deluxe vB User login script letters on my site get messed.
If i remove inlusion of global.php letters are OK (but then script doesn't work)

Can someone help me?

[erinys]

any news bill?

[Chicago_VLNU_4s]

hmmm. this worked before I switched servers.. It works and everything but now I get this error above the avatar

Warning: getimagesize() [function.getimagesize]: URL file-access is disabled in the server configuration in /home/.mojo/*****/offthaave.com/login_inc.php on line 34

Warning: getimagesize(http://www.offthaave.com/forums//image.php?u=1) [function.getimagesize]: failed to open stream: no suitable wrapper could be found in /home/.mojo/*****/offthaave.com/login_inc.php on line 34

Any ideas?

[cmcnabb]

First - thanks for the awesome hack - this is great and exactly what I need. But I seem to be redirecting to the forum home page on login. I'm using the newest VB, and would really prefer to return to the originating page.

[Billspaintball]

Originally Posted by cmcnabb

First - thanks for the awesome hack - this is great and exactly what I need. But I seem to be redirecting to the forum home page on login. I'm using the newest VB, and would really prefer to return to the originating page.

It should return to the originating page by default.

What browser are you using?
If its Firefox can you try another browser such as IE and see if it does the same?

[erinys]

Hey bill,

I guess no luck yet figuring out why a site wich uses this mod, turn completely 404 on the pages where this addon is included when someone his password is expired.

This can potentional be very damaging to your site, as everyone in the community most likely is going to have his password expire sooner or later, and when that happends, the website will appear to be completely down

If you cant find the problem, i would suggest to everyone to uninstall this addon, because it has the potential of breaking your entire site.

I really hope you can find a solution for this, or at least talk with the DEV as to why this is happening.

thanks!

[Billspaintball]

Originally Posted by erinys

Hey bill,

I guess no luck yet figuring out why a site wich uses this mod, turn completely 404 on the pages where this addon is included when someone his password is expired.

Ive had a look on my test site but cant find any option that allows me to force passwords to expire.
Without being able to replicate the problem I cant fix it.

[erinys]

Ouch, yes that is a problem

ok i checked in the phpmyadmin, and for the table "users" there is a row wich is called "passworddate" This row has the date it happend for me, and last changed it, so my guess is that if you set that date to a couple years backwards, the forum should set you expired password.

else might wanna check with the guys on vbulletin.com

thanks!

[Chicago_VLNU_4s]

Originally Posted by Chicago_VLNU_4s

hmmm. this worked before I switched servers.. It works and everything but now I get this error above the avatar



Any ideas?

no help huh?