Moderators Functions - vbAccessDenied

Keywords: admincp, access denied, forum access, access, user, admin, usergroup


This modification contains a MySQL injection vulnerability, and you are hereby advised to unintall this modification until such time that the author provides a fix.
-- vBorg Staff


Description:
A powerful tool for customizing the generic vBulletin access denied message.

Translations
German (Thanks to alluidh)

Features:

• Fully Phrased.
• Turn on or off in admin cp.
• Created a custom message for any vBulletin generic access denied message.
• Personalize messages with any user, forum or usergroup information.
• Automatically send a PM to one or more users the first time a member receives a specific access denied message.
• Personalize the PM with any user, forum or usergroup information.
• Add an approval link to the automatic PM that will give the user a new primary or secondary usergroup of your choice when clicked.
• Send a PM to everyone who received the original access request, and the requesting user, when they are approved.
• Several layers of security.

Use Case
On my board we only allow access to a few forums until a user has been approved by an admin. The sample screen shots show this process in action.

Install

1. Download the vbAccessDenied_1.0.zip file.
2. Unzip and upload the files in the upload directory to your forum root.
3. Import the product file in your admincp.
4. Create custom messages as desired.

1.1 Changes

1. Supports bbcodes in messages (see updated screen shot).
2. Fixed sql bug that prevented many messages from showing properly.
3. Removed 255 character limit on messages.

Upgrade from 1.0 to 1.1
You will need to reupload all files, and uninstall and reinstall the product to upgrade from 1.0 to 1.1. Please copy your messages to a text editor first if you want to save them.

[hambil]

Originally Posted by pugmy

Accessing index.php somehow checked your code. I got the error even after I deactivated the hack from "vbAccessDenied Settings" page. So i had to disable the product temporarily until I find a solution.

Okay, I made a change that should fix it - download the new zip and reinstall. Perhaps it will now uncover the real error

[hambil]

Originally Posted by alluidh

Hi Hambil
Is it OK to translate your powerful modification into german and gave the phrases to the members on vbhacks-germany.com?

I'd be honored. Thank you

[alluidh]

I had to thank you

[pugmy]

i forgot to mention but unregistered users can't view my forum. perhaps thats the cause of it?

edit: oh awesome. ill try it right away.

[hambil]

Originally Posted by pugmy

i forgot to mention but unregistered users can't view my forum. perhaps thats the cause of it?

edit: oh awesome. ill try it right away.

Could be. Very interesting.

[pugmy]

This time, it properly inserted the forumid, but still ive got the sql error.

Invalid SQL:

		SELECT * FROM accessdenied_message
		WHERE usergroupid = 1
		AND forumid = 0 
		AND (script = 'index(*)' OR script = '*' OR script = 'index(*)';

MySQL Error  : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server 
version for the right syntax to use near '' at line 4

hmm weird.

[hambil]

Hey! That's the sql bug I fixed in version 1.1. How did that creep back in? Dang - sorry folks. I've updated the zip again. Try now.

[pugmy]

the sql error disappeared when i created a vbaccessdenied page for unregistered users accessing index.php. however, this makes it unable for them to login in the first place.

edit. okidoki. thanks for the quick response.

[pugmy]

It seems it's working great now.
Thanks for the quick fix!

[hambil]

Originally Posted by pugmy

It seems it's working great now.
Thanks for the quick fix!

You're welcome. Now how about that install button...